FM / powershell

/var/opt/nydus/ops/customer_local_ops/operating_system/powershell/

/var/opt/nydus/ops/customer_local_ops/operating_system/powershell

Name	Size	Mode	Actions
add_user.ps1	2179	0644	edit dl rm
add_user_to_group.ps1	893	0644	edit dl rm
change_password.ps1	1640	0644	edit dl rm
collect_packages.ps1	4475	0644	edit dl rm
collect_processes_services.ps1	747	0644	edit dl rm
configure_port.ps1	1503	0644	edit dl rm
cpu_utilization.ps1	141	0644	edit dl rm
enable_winexe.ps1	1196	0644	edit dl rm
extend_disk.ps1	2067	0644	edit dl rm
get_disk_info.ps1	5528	0644	edit dl rm
get_system_info.ps1	2977	0644	edit dl rm
install_devcon.ps1	3346	0644	edit dl rm
install_panopta.ps1	188	0644	edit dl rm
install_qemu_agent.ps1	2285	0644	edit dl rm
memory_utilization.ps1	180	0644	edit dl rm
reset_vm_properties.ps1	520	0644	edit dl rm
setNetwork.ps1	3027	0644	edit dl rm
shutdown_ovh_vm.ps1	958	0644	edit dl rm
update_invalid_resolvers.ps1	5370	0644	edit dl rm

Edit: /var/opt/nydus/ops/customer_local_ops/operating_system/powershell/add_user.ps1 (2179B)

param([Parameter(Mandatory)] [String] $userName,[Parameter(Mandatory)] [String] $groupName)

$passwordBase64 = Read-Host
$password = [System.Text.Encoding]::UTF8.GetString(
    [System.Convert]::FromBase64String($passwordBase64))

if(Get-WmiObject -query "SELECT * FROM Win32_UserAccount where LocalAccount='True' and name = '$userName'"){
    $user = [ADSI]"WinNT://$($env:COMPUTERNAME)/$userName,user"
}else{
    $cn = [ADSI]"WinNT://$($env:COMPUTERNAME)"
    $user = $cn.Create("User",$userName)
    $user.UserFlags = 66049
    $user.Put("description", "Local Account")    
}

try{
       $user.SetPassword($password)
       $user.SetInfo()
}catch{
       $errorMessage=$_.Exception.Message 
       
       if($errorMessage -like "*Passwords may not contain the user's samAccountName *"){
           throw $_.Exception.Message           
       }elseif($errorMessage -like "*The password does not meet the password policy requirements.*"){
           $errorMessage
           secedit /export /cfg c:\secpol.cfg
           (gc C:\secpol.cfg).replace("PasswordComplexity = 1", "PasswordComplexity = 0") | Out-File C:\secpol.cfg
           secedit /configure /db c:\windows\security\local.sdb /cfg c:\secpol.cfg /areas SECURITYPOLICY
           rm -force c:\secpol.cfg -confirm:$false

$user.SetPassword($password)
           $user.SetInfo()

secedit /export /cfg c:\secpol.cfg
           (gc C:\secpol.cfg).replace("PasswordComplexity = 0", "PasswordComplexity = 1") | Out-File C:\secpol.cfg
           secedit /configure /db c:\windows\security\local.sdb /cfg c:\secpol.cfg /areas SECURITYPOLICY
           rm -force c:\secpol.cfg -confirm:$false
       } 
}

$computer = [ADSI]("WinNT://$($env:COMPUTERNAME),computer")
$admins = $computer.psbase.children.find('Administrators')
$members = $admins.psbase.invoke('Members') | %{$_.GetType().InvokeMember('Name', 'GetProperty', $null, $_, $null)}
if($members -contains $userName){
}else{
    $group = [ADSI]"WinNT://$($env:COMPUTERNAME)/$groupName,group"
    try{
        $group.psbase.Invoke("Add",([ADSI]"WinNT://$($env:COMPUTERNAME)/$userName").path)  
    }catch{
        $_.Exception.Message
    }
}

param([Parameter(Mandatory)] [String] $userName,[Parameter(Mandatory)] [String] $groupName) $passwordBase64 = Read-Host $password = [System.Text.Encoding]::UTF8.GetString( [System.Convert]::FromBase64String($passwordBase64)) if(Get-WmiObject -query "SELECT * FROM Win32_UserAccount where LocalAccount='True' and name = '$userName'"){ $user = [ADSI]"WinNT://$($env:COMPUTERNAME)/$userName,user" }else{ $cn = [ADSI]"WinNT://$($env:COMPUTERNAME)" $user = $cn.Create("User",$userName) $user.UserFlags = 66049 $user.Put("description", "Local Account") } try{ $user.SetPassword($password) $user.SetInfo() }catch{ $errorMessage=$_.Exception.Message if($errorMessage -like "*Passwords may not contain the user's samAccountName *"){ throw $_.Exception.Message }elseif($errorMessage -like "*The password does not meet the password policy requirements.*"){ $errorMessage secedit /export /cfg c:\secpol.cfg (gc C:\secpol.cfg).replace("PasswordComplexity = 1", "PasswordComplexity = 0") | Out-File C:\secpol.cfg secedit /configure /db c:\windows\security\local.sdb /cfg c:\secpol.cfg /areas SECURITYPOLICY rm -force c:\secpol.cfg -confirm:$false $user.SetPassword($password) $user.SetInfo() secedit /export /cfg c:\secpol.cfg (gc C:\secpol.cfg).replace("PasswordComplexity = 0", "PasswordComplexity = 1") | Out-File C:\secpol.cfg secedit /configure /db c:\windows\security\local.sdb /cfg c:\secpol.cfg /areas SECURITYPOLICY rm -force c:\secpol.cfg -confirm:$false } } $computer = [ADSI]("WinNT://$($env:COMPUTERNAME),computer") $admins = $computer.psbase.children.find('Administrators') $members = $admins.psbase.invoke('Members') | %{$_.GetType().InvokeMember('Name', 'GetProperty', $null, $_, $null)} if($members -contains $userName){ }else{ $group = [ADSI]"WinNT://$($env:COMPUTERNAME)/$groupName,group" try{ $group.psbase.Invoke("Add",([ADSI]"WinNT://$($env:COMPUTERNAME)/$userName").path) }catch{ $_.Exception.Message } }