Add-BackConnectionHostNames.ps1
|
function Add-BackConnectionHostNames { <# .SYNOPSIS Adds one or more host names to the BackConnectionHostNames registry value. .DESCRIPTION The BackConnectionHostNames registry value is used to bypass the loopback security check for specific host names. .LINK http://support.microsoft.com/kb/896861 .EXAMPLE Add-TecBoxBackConnectionHostNames fabrikam-local, www-local.fabrikam.com #> [CmdletBinding()] param( [parameter(Mandatory = $true, ValueFromPipeline = $true)] [string[]] $HostNames) begin { Set-StrictMode -Version Latest $ErrorActionPreference = "Stop" function GetBackConnectionHostNameList { [Collections.ArrayList] $hostNameList = New-Object Collections.ArrayList [string] $registryPath = "HKLM:\System\CurrentControlSet\Control\Lsa\MSV1_0" $registryKey = Get-Item -Path $registryPath $registryValue = $registryKey.GetValue("BackConnectionHostNames") $registryValue | ForEach-Object { $hostNameList.Add($_) | Out-Null } # HACK: Return an array (containing the ArrayList) to avoid issue with # PowerShell returning a string (when registry value only contains one # item) return ,$hostNameList } function SetBackConnectionHostNamesRegistryValue( [Collections.ArrayList] $hostNameList = $(Throw "Value cannot be null: hostNameList")) { $hostNameList.Sort() for ([int] $i = 0; $i -lt $hostNameList.Count; $i++) { If ([string]::IsNullOrEmpty($hostNameList[$i]) -eq $true) { $hostNameList.RemoveAt($i) $i-- } } [string] $registryPath = "HKLM:\System\CurrentControlSet\Control\Lsa\MSV1_0" $registryKey = Get-Item -Path $registryPath $registryValue = $registryKey.GetValue("BackConnectionHostNames") If ($hostNameList.Count -eq 0) { Remove-ItemProperty -Path $registryPath ` -Name BackConnectionHostNames } ElseIf ($registryValue -eq $null) { New-ItemProperty -Path $registryPath -Name BackConnectionHostNames ` -PropertyType MultiString -Value $hostNameList | Out-Null } Else { Set-ItemProperty -Path $registryPath -Name BackConnectionHostNames ` -Value $hostNameList | Out-Null } } [bool] $isInputFromPipeline = ($PSBoundParameters.ContainsKey("HostNames") -eq $false) [int] $hostNamesAdded = 0 [Collections.ArrayList] $hostNameList = GetBackConnectionHostNameList } process { If ($isInputFromPipeline -eq $true) { $items = $_ } Else { $items = $HostNames } $items | foreach { [string] $hostName = $_ [bool] $isHostNameInList = $false $hostNameList | foreach { If ([string]::Compare($_, $hostName, $true) -eq 0) { Write-Verbose ("The host name ($hostName) is already" ` + " specified in the BackConnectionHostNames list.") $isHostNameInList = $true return } } If ($isHostNameInList -eq $false) { Write-Verbose ("Adding host name ($hostName) to" ` + " BackConnectionHostNames list...") $hostNameList.Add($hostName) | Out-Null $hostNamesAdded++ } } } end { If ($hostNamesAdded -eq 0) { Write-Verbose ("No changes to the BackConnectionHostNames registry" ` + " value are necessary.") return } SetBackConnectionHostNamesRegistryValue $hostNameList Write-Verbose ("Successfully added $hostNamesAdded host name(s) to" ` + " the BackConnectionHostNames registry value.") } } |