Get-LAPSCredential.psm1
|
try { if ($PSVersionTable.PSVersion.Major -gt 5) { Import-Module "$env:windir\system32\WindowsPowerShell\v1.0\Modules\AdmPwd.PS" -SkipEditionCheck -ErrorAction Stop } else { Import-Module "$env:windir\system32\WindowsPowerShell\v1.0\Modules\AdmPwd.PS" -ErrorAction Stop } } catch { Write-Error -ErrorAction Stop -Message "Could not find AdmPwd.PS in system32. Make sure it is installed" } function Get-LAPSCredential { [CmdletBinding(ConfirmImpact = "Low")] [OutputType([pscredential])] # Get-AdmPwdPassword only returns plaintext. So to satisfy PSScriptAnalyzer this is needed [Diagnostics.CodeAnalysis.SuppressMessageAttribute("PSAvoidUsingConvertToSecureStringWithPlainText", "")] param ( [Parameter(Mandatory = $true, ValueFromPipeline = $true, ValueFromPipelineByPropertyName = $true)] [string[]] $Computername, [Parameter(Mandatory = $false)] [string] [Alias("AccountName")] $AdministratorAccountName = "Administrator" ) begin { } process { foreach ($Computer in $Computername) { $AdmPwdPassword = Get-AdmPwdPassword -Computername $Computer | Select-Object -ExpandProperty Password if ($AdmPwdPassword) { $Password = $AdmPwdPassword | ConvertTo-SecureString -AsPlainText -Force -ErrorAction Stop } else { Write-Error "Couldn't get Password for '$Computer'!" -ErrorAction Stop } $UserName = "$Computer\$AdministratorAccountName" [PSCredential]::new($Username, $Password) } } end { } <# .SYNOPSIS Retrieves the LAPS credentials for a Computer .DESCRIPTION Creates a credential object for each given computername. Username: computername\Administrator Password: retrieved from LAPS .PARAMETER Computername One or more computername(s) for which to create credentials .PARAMETER AdministratorAccountName Name of the local Administrator Account which will be used in the Credential. "Administrator" is the default .EXAMPLE PS C:\> Get-LAPSCredential -Computername "DESKTOP-HYKJASF" UserName Password -------- -------- DESKTOP-HYKJASF\Administrator System.Security.SecureString .EXAMPLE PS C:\> Get-LAPSCredential -Computername "DESKTOP-HYKJASF" -AdministratorAccountName "Admin" UserName Password -------- -------- DESKTOP-HYKJASF\Admin System.Security.SecureString .INPUTS System.String. Name of the Computer for which the credential will be created. .OUTPUTS System.Management.Automation.PSCredential. Created Credential. .NOTES none #> } Export-ModuleMember -Function Get-LAPSCredential |