The Where-Object cmdlet provides a way for you to filter data returned by other cmdlets. For example, by default the Get-Process cmdlet returns information about all the processes currently running on your computer. However, suppose you’re interested in only those processes using more than 200 handles. (We’re not sure why you’d be interested in that, but ….) To get back only that subset of processes, call Get-Process and then pipe the results through Where-Object:
Get-Process | Where-Object {$_.handles -gt 200}
Take careful note of the syntax. To begin, the where clause is enclosed within curly braces; in addition, the $_ notation is used to represent the default object (that is, the object being transferred across the pipeline). Last, but surely not least, notice the comparison operator being used to indicate greater than: it’s -gt as opposed to >. Windows PowerShell does not use the standard arithmetic comparison operators; instead, it uses operators such as these:
-lt -- Less than
-le -- Less than or equal to
-gt -- Greater than
-ge -- Greater than or equal to
-eq -- Equal to
-ne -- Not equal to
-like - Like; uses wildcards for pattern matching
In other words, if we were looking for processes where handles were greater than or equal to 200 we’d use this command:
Get-Process | Where-Object {$_.handles -ge 200}
You can also use the -and and -or parameters to create even-more finitely targeted datasets. For example, suppose you’d like to return all the instances of the svchost process that are using more than 200 handles. All you have to do is include both criterion in your where clause, separating the two by using -and:
Likewise, suppose you wanted a list of all the process that are using more than 200 handles or that have the name svchost (in other words, all processes using more than 200 handles as well as all the svchost processes, regardless of the number of handles they might be using). In that case, use the -or parameter to join the two parts of your where clause:
Here’s another example; this one (using the Get-ChildItem cmdlet) shows you only the files in the folder C:\Scripts that are larger than 100,000 bytes:
And let’s not forget the -like operator. This command returns all of the files in C:\Scripts that include the string test in the file name. Note the use of the two asterisks as wildcard characters:
PortMon v3.03 (January 12, 2012) Monitor serial and parallel port activity with this advanced monitoring tool. It knows about all standard serial and parallel IOCTLs and even shows you a portion of the data being sent and received. Version 3.x has powerful new UI enhancements and advanced filtering capabilities.
ProcDump v9.0 (May 16, 2017) This command-line utility is aimed at capturing process dumps of otherwise difficult to isolate and reproduce CPU spikes. It also serves as a general process dump creation utility and can also monitor and generate process dumps when a process has a hung window or unhandled exception.
Process Explorer v16.21 (May 16, 2017) Find out what files, registry keys and other objects processes have open, which DLLs they have loaded, and more. This uniquely powerful utility will even show you who owns each process.
Process Monitor v3.50 (Febryary 13, 2018) Monitor file system, Registry, process, thread and DLL activity in real-time.
PsExec v2.2 (June 29, 2016) Execute processes on remote systems.
PsFile v1.03 (June 29, 2016) See what files are opened remotely.
PsGetSid v1.45 (June 29, 2016) Displays the SID of a computer or a user.
PsInfo v1.78 (June 29, 2016) Obtain information about a system.
PsKill v1.16 (June 29, 2016) Terminate local or remote processes.
PsService v2.25 (June 29, 2016) View and control services.
PsShutdown v2.52 (December 4, 2006) Shuts down and optionally reboots a computer.
PsSuspend v1.07 (June 29, 2016) Suspend and resume processes.
PsTools v2.45 (July 4, 2016) The PsTools suite includes command-line utilities for listing the processes running on local or remote computers, running processes remotely, rebooting computers, dumping event logs, and more.
RAMMap v1.51 (May 31, 2018) An advanced physical memory usage analysis utility that presents usage information in different ways on its several different tabs.
RegDelNull v1.11 (July 4, 2016) Scan for and delete Registry keys that contain embedded null-characters that are otherwise undeleteable by standard Registry-editing tools.
Registry Usage (RU.md) v1.2 (July 4, 2016) View the registry space usage for the specified registry key.
RegJump v1.1 (April 20, 2015) Jump to the registry path you specify in Regedit.
SDelete v2.01 (February 13, 2018) Securely overwrite your sensitive files and cleanse your free space of previously deleted files using this DoD-compliant secure delete program.
ShareEnum v1.6 (November 1, 2006) Scan file shares on your network and view their security settings to close security holes.
ShellRunas v1.01 (February 28, 2008) Launch programs as a different user via a convenient shell context-menu entry.
Sigcheck v2.70 (October 19, 2018) Dump file version information and verify that images on your system are digitally signed.
AccessChk v6.20 (November 19, 2017) AccessChk is a command-line tool for viewing the effective permissions on files, registry keys, services, processes, kernel objects, and more.
AccessEnum v1.32 (November 1, 2006) This simple yet powerful security tool shows you who has what access to directories, files and Registry keys on your systems. Use it to find holes in your permissions.
AdExplorer v1.44 (November 15, 2012) Active Directory Explorer is an advanced Active Directory (AD) viewer and editor.
AdInsight v1.2 (October 26, 2015) An LDAP (Light-weight Directory Access Protocol) real-time monitoring tool aimed at troubleshooting Active Directory client applications.
AdRestore v1.1 (November 1, 2006) Undelete Server 2003 Active Directory objects.
Autologon v3.10 (August 29, 2016) Bypass password screen during logon.
Autoruns v13.90 (July 5, 2018) See what programs are configured to startup automatically when your system boots and you login. Autoruns also shows you the full list of Registry and file locations where applications can configure auto-start settings.
BgInfo v4.26 (October 19, 2018) This fully-configurable program automatically generates desktop backgrounds that include important information about the system including IP addresses, computer name, network adapters, and more.
BlueScreen v3.2 (November 1, 2006) This screen saver not only accurately simulates Blue Screens, but simulated reboots as well (complete with CHKDSK), and works on Windows NT 4, Windows 2000, Windows XP, Server 2003 and Windows 95 and 98.
CacheSet v1.0 (November 1, 2006) CacheSet is a program that allows you to control the Cache Manager's working set size using functions provided by NT. It's compatible with all versions of NT.
ClockRes v2.1 (July 4, 2016) View the resolution of the system clock, which is also the maximum timer resolution.
Contig v1.8 (July 4, 2016) Wish you could quickly defragment your frequently used files? Use Contig to optimize individual files, or to create new files that are contiguous.
Coreinfo v3.31 (August 18, 2014) Coreinfo is a new command-line utility that shows you the mapping between logical processors and the physical processor, NUMA node, and socket on which they reside, as well as the cache’s assigned to each logical processor.
Ctrl2cap v2.0 (November 1, 2006) This is a kernel-mode driver that demonstrates keyboard input filtering just above the keyboard class driver in order to turn caps-locks into control keys. Filtering at this level allows conversion and hiding of keys before NT even "sees" them. Ctrl2cap also shows how to use NtDisplayString() to print messages to the initialization blue-screen.
DebugView v4.81 (December 4, 2012) Another first from Sysinternals: This program intercepts calls made to DbgPrint by device drivers and OutputDebugString made by Win32 programs. It allows for viewing and recording of debug session output on your local machine or across the Internet without an active debugger.
Desktops v2.0 (October 17, 2012) This new utility enables you to create up to four virtual desktops and to use a tray interface or hotkeys to preview what’s on each desktop and easily switch between them.
Disk2vhd v2.01 (January 21, 2014) Disk2vhd simplifies the migration of physical systems into virtual machines (p2v.md).
Diskmon v2.01 (November 1, 2006) This utility captures all hard disk activity or acts like a software disk activity light in your system tray.
DiskView v2.4 (March 25, 2010.md) Graphical disk sector utility.
Disk Usage (DU.md) v1.61 (February 13, 2018) View disk usage by directory.
EFSDump v1.02 (November 1, 2006) View information for encrypted files.
FindLinks v1.1 (July 4, 2016) FindLinks reports the file index and any hard links (alternate file paths on the same volume.md) that exist for the specified file. A file's data remains allocated so long as at it has at least one file name referencing it.
Handle v4.11 (December 12, 2017) This handy command-line utility will show you what files are open by which processes, and much more.
Hex2dec v1.1 (July 4, 2016) Convert hex numbers to decimal and vice versa.
LDMDump v1.02 (November 1, 2006) Dump the contents of the Logical Disk Manager's on-disk database, which describes the partitioning of Windows 2000 Dynamic disks.
ListDLLs v3.2 (July 4, 2016) List all the DLLs that are currently loaded, including where they are loaded and their version numbers.
LiveKd v5.62 (May 16, 2017) Use Microsoft kernel debuggers to examine a live system.
LoadOrder v1.01 (July 4, 2016) See the order in which devices are loaded on your WinNT/2K system.
LogonSessions v1.4 (July 4, 2016) List the active logon sessions on a system.
MoveFile v1.01 (January 24, 2013) Allows you to schedule move and delete commands for the next reboot.
NotMyFault v4.01 (November 18, 2016) Notmyfault is a tool that you can use to crash, hang, and cause kernel memory leaks on your Windows system.
NTFSInfo v1.2 (July 4, 2016) Use NTFSInfo to see detailed information about NTFS volumes, including the size and location of the Master File Table (MFT) and MFT-zone, as well as the sizes of the NTFS meta-data files.
PendMoves v1.2 (February 5, 2013) Enumerate the list of file rename and delete commands that will be executed the next boot.
PipeList v1.02 (July 4, 2016) Displays the named pipes on your system, including the number of maximum instances and active instances for each pipe.
Skype for Business Server 2015, Debugging Tools is a collection of additional tools for use by IT Admins to aid in troubleshooting Skype for Business Server 2015 deployments. The collection of tools include:
Snooper
CLSLogger
CLSScenarioEdit.psm1
Supported Operating System
Windows Server 2008 R2 SP1, Windows Server 2012, Windows Server 2012 R2
Additional Software: Skype for Business Server 2015
Stats Man and KHI released for Skype for Business Server 2019
Two more tools have been released for Skype for Business Server 2019. The Real-Time Stats Manager and Key Health Indicators (KHI) are now available for download here:
Lync 2013 - Skype for Business Server 마이그레이션 Check List
After much searching you will find there isn’t much in the way of guidance provided on TechNet when migrating from Lync 2013 to Skype for Business Server as there is when migrating from Lync 2010 to Lync 2013. I was working on a Lync 2013 to Skype for Business Migration and wanted to make sure we didn’t forget anything when moving from a Lync 2013 Pool to a Skype for Business Pool. The following should help. Essentially the process is the same so refer to https://technet.microsoft.com/en-us/library/jj205369%28v=ocs.15%29.aspx?f=255&MSPPError=-2147217396 for more details.
This process assumes that your new pool is built and tested with pilot users. You have validated that all aspects and functionality are working as they should be including Edge server functionality. You have also cutover the required DNS records to support primary user sign on to this new pool as well as Public DNS records that support Skype for Business. It is best to dump all your DNS and SRV records and ensure you have not missed anything here. Again, the article above will provide guidance if you need it.
Don’t forget any topology changes with respect to your Edge servers communicating with your next hop front end servers. You likely need to make changes here. Lastly if you have deployed phones, you may have to make DHCP changes with respect to your certificate publishing. Guidance provided here.
Once you have addressed these prerequisites you can move on.
이 프로세스에서는 새 풀이 파일럿 사용자로 구성되어 테스트 된 것으로 가정합니다. Edge Server 기능을 포함해야하므로 모든 측면과 기능이 제대로 작동하는지 확인했습니다. Skype for Business를 지원하는 공용 DNS 레코드뿐만 아니라이 새로운 풀에 대한 기본 사용자 사인온을 지원하기 위해 필요한 DNS 레코드를 컷 오버했습니다. 모든 DNS 및 SRV 레코드를 버리고 여기에서 무엇이든 놓치지 않았는지 확인하는 것이 가장 좋습니다. 위에서 언급 한 기사에서도 필요한 경우 안내를 제공합니다.다음 홉 프런트 엔드 서버와 통신하는 에지 서버와 관련하여 토폴로지 변경 사항을 잊지 마십시오. 여기에서 변경해야 할 가능성이 큽니다. 마지막으로 전화기를 배치 한 경우 인증서 게시와 관련하여 DHCP를 변경해야 할 수도 있습니다. 여기에 안내가 제공됩니다.이 전제 조건을 다룬 후에는 계속 진행할 수 있습니다.
After you move users make sure they are not assigned to any Site Level Voice Policies in the old pool. If both your pools are in the same site you don’t have to worry about this. If you are moving between sites then you should create all the required voice policies on the new pool and then change this for any users using them. As an example, the following changes
Managing address book in Lync\SFB environment, in itself, is a task. Lync\SFB admins keep on getting address book related issues in the environment.
Users may notice duplicate contacts in address book search
User may notice old contact details (name, phone number, title etc).
Users see contacts deleted in Active Directory (resigned cases)
Users may not be able to search address book.
Users may experience “Cannot Synchronize Address Book” error as below.
"This article focusses on steps to resolve address book issues."
Re-Create the Address Book (Server)
This section of the article explains the process to re-create address book files at server end. Navigate following folder and delete the contents (existing address book files).
Forces the back-end user database to clear its replication status with Active Directory. This causes the database to re-read all the user-related information stored in Active Directory Domain Services.
Now, run following command on the Front End server;
Update-CsAddressBook
Forces the specified Address Book servers to synchronize their contents with the User database.
Wait for some time (5-10 mins, may be longer), and navigate to following location. You should see the files being recreated.
As a next step, make sure that you can browse to the following URLs.
As an internal client;
https://<internal web services url>/abs/handler https://<internal web services url>/abs/handler/GroupExpansion/Service.svc
As an external client;
https://<external web services url>/abs/handler https://<external web services url>/abs/handler/GroupExpansion/Service.svc
Test Address Book Service
Run following commands to check errors. You should be fine if it doesn’t return configuration related erros.
Test-CsAddressBookService
Test-CsAddressBookWebQuery
AddressBookAvailability Setting in Client Policy
You have option to select how a user should search a contact. There is a setting, AddressBookAvailability, in Lync\SFB client policy for this. By default, the policy is set to allow address book download and web search (by typing SIP URI of a contact).
Run following command to check address book setting.
Get-CsClientPolicy | Select-Object Identity,AddressBookAvailability | ft
There are currently three available settings for this parameter; WebSearchAndFileDownload,WebSearchOnly, and FileDownloadOnly. Define it as per your organization’s requirement.
WebSearchOnly is realtime and address book file content could be 24 hrs old.
You need to type full SIP URI for web search. Contact searching is user friendly if address book file downloaded.
Re-Create the Address Book (Client)
Now, re-create address book file, after performing above steps. First, delete local SIP profile of the users.
If user is running Skype For Business 2016
Log off of the Lync client and delete the profile from:
In some cases, Lync\SFB users may face delay (upto 60 minutes) in address book download. Create this registry key to download address book immediately.
Run following command if user is running Skype For Business 2016
