PowerShell – テックメモ

2026-01-032026-01-03

PowerShell NASバックアップスクリプト

新しいNAS(Windows Server IoT)を導入した｡バックアップに専用のソフトを導入するほどの規模でもないのでPowerShell+タスクスケジューラにて設定｡

-日次ミラーリングデータ*2
-1週間分の差分データ
-月次のミラーリングデータ

$src = "xxx"
$dst1 = "xxx"
$dst2 = "xxx"
$dif = "xxx"
$mon = "xxx"

$opt = @("/R:3", "/W:5", "/NP", "/NDL")
$today = Get-Date
$dayNum = [int]$today.DayOfWeek

robocopy $src $dst1 /MIR $opt
robocopy $src $dst2 /MIR $opt

if ($dayNum -ne 0) {
  $targetDir = Join-Path $dif $dayNum
  if (Test-Path $targetDir) { Remove-Item $targetDir -Recurse -Force }
  New-Item -Path $targetDir -ItemType Directory -Force | Out-Null
  $lastSunday = $today.AddDays(-$dayNum).ToString("yyyyMMdd")
  robocopy $src $targetDir /S /MAXAGE:$lastSunday $opt
}

if ($today.Day -eq 1) { robocopy $src $mon /MIR $opt }

$src = "xxx"

$dst1 = "xxx"

$dst2 = "xxx"

$dif = "xxx"

$mon = "xxx"

$opt = @("/R:3", "/W:5", "/NP", "/NDL")

$today = Get-Date

$dayNum = [int]$today.DayOfWeek

robocopy $src $dst1 /MIR $opt

robocopy $src $dst2 /MIR $opt

if ($dayNum -ne 0) {

$targetDir = Join-Path $dif $dayNum

if (Test-Path $targetDir) { Remove-Item $targetDir -Recurse -Force }

New-Item -Path $targetDir -ItemType Directory -Force | Out-Null

$lastSunday = $today.AddDays(-$dayNum).ToString("yyyyMMdd")

robocopy $src $targetDir /S /MAXAGE:$lastSunday $opt

}

if ($today.Day -eq 1) { robocopy $src $mon /MIR $opt }

2025-12-30

PowerShell ネットワークプロファイル変更

Get-NetConnectionProfile
Set-NetConnectionProfile -InterfaceIndex 5 -NetworkCategory Private

2024-09-22

PowerShell リモート許可設定

if (-not ([Security.Principal.WindowsPrincipal] [Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole] "Administrator"))
{
  $scriptPath = $MyInvocation.MyCommand.Path
  Start-Process -FilePath "powershell.exe" -ArgumentList "-NoProfile -ExecutionPolicy Bypass -File `"$scriptPath`"" -Verb RunAs
  Exit
}

# ユーザーを追加する場合
# New-LocalUser -Name "TempUser" -Password (ConvertTo-SecureString "1234" -AsPlainText -Force) -AccountNeverExpires -PasswordNeverExpires
# Add-LocalGroupMember -Group "Administrators" -Member "TempUser"

# 空パスワードの許可
Set-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\Lsa' -Name 'LimitBlankPasswordUse' -Value 0

# リモート接続の許可 (sysdm.cpl＞リモートが有効になる) + ネットワークレベル認証の解除(PROのみ)
Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server" -Name "fDenyTSConnections" -Value 0
Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp" -Name "UserAuthentication" -Value 0

# ファイルとプリンターの共有を有効にする
# netsh advfirewall firewall set rule group="ファイルとプリンターの共有" new enable=Yes
Enable-NetFirewallRule -DisplayGroup "ファイルとプリンターの共有"

# リモートデスクトップを有効にする
# netsh advfirewall firewall set rule group="リモート デスクトップ" new enable=yes
if (Get-NetFirewallRule | Where-Object { $_.DisplayGroup -eq "リモート デスクトップ" })
{
  Enable-NetFirewallRule -DisplayGroup "リモート デスクトップ"
}

# 別セグメント許可
# netsh advfirewall firewall add rule name="Allow Subnet RDP" dir=in action=allow protocol=tcp localport=3389 profile=private,public remoteip=192.168.0.0/16
New-NetFirewallRule -DisplayName "Allow Subnet RDP" -Name "Allow Subnet RDP" -Direction Inbound -Action Allow -Protocol TCP -LocalPort 3389 -Profile Private,Public -RemoteAddress 192.168.0.0/16

# AC電源使用時のスリープを無効にする
powercfg /change standby-timeout-ac 0

# AC電源使用時のディスプレイオフタイムアウトを無効にする
powercfg /change monitor-timeout-ac 0

# AC電源使用時のハードディスクの電源オフタイムアウトを無効にする
powercfg /change disk-timeout-ac 0

# アクティブなユーザー名(PROのみ)
$activeUser1 = (query user | Select-String "Active" | ForEach-Object {
  $_.ToString().Split(" ", [System.StringSplitOptions]::RemoveEmptyEntries)[0]
})

$activeUser2 = (Get-WMIObject -ClassName Win32_ComputerSystem).Username

# IPアドレス(192.168.が含まれている)
$ipAddress1 = (Get-NetIPAddress | Where-Object { $_.IPAddress -like "192.168.*" }).IPAddress

# IPアドレス(デフォルトゲートウェイが設定されている)
$ipAddress2 = (Get-NetIPConfiguration | Where-Object { $_.IPv4DefaultGateway -ne $null }).IPv4Address.IPAddress

# wmic useraccount get Caption
$wmic = (Get-WmiObject Win32_UserAccount | Select-Object -ExpandProperty Caption) -join "`r`n"

$whoami = whoami

$computer = Get-WmiObject Win32_ComputerSystem
$domain = $computer.Domain
$workgroup = $computer.Workgroup

$Body = "domain: " + $domain + "`r`n`r`n" + "workgroup: " + $workgroup + "`r`n`r`n" + "active user: " + $activeUser1 + "`r`n`r`n" + "active user: " + $activeUser2 + "`r`n`r`n" + "ip address(192.168.*): " + $ipAddress1 + "`r`n`r`n" + "ip address(default gateway): " + $ipAddress2 + "`r`n`r`n" + "wmic: " + $wmic + "`r`n`r`n" + "whoami: " + $whoami

Write-Output $Body

$encode = [System.Text.Encoding]::UTF8
$SMTPServer = "xxx"
$SMTPPort = "xxx"
$Username = "xxx"
[System.Security.SecureString]$Password = ConvertTo-SecureString "xxx" -AsPlainText -Force
$From = "xxx"
$To = "xxx" 
$Subject = "リモート接続情報"
[System.Collections.Hashtable]$SMTPMessage = @{
    To = $To
    From = $From
    Subject = $Subject
    Body = $Body
    SmtpServer = $SMTPServer
    Port = $SMTPPort
    Credential = New-Object System.Management.Automation.PSCredential ($Username, $Password)
    Encoding = $encode
}
Send-MailMessage @SMTPMessage

Pause

if (-not ([Security.Principal.WindowsPrincipal] [Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole] "Administrator"))

{

$scriptPath = $MyInvocation.MyCommand.Path

Start-Process -FilePath "powershell.exe" -ArgumentList "-NoProfile -ExecutionPolicy Bypass -File `"$scriptPath`"" -Verb RunAs

Exit

}

# ユーザーを追加する場合

# New-LocalUser -Name "TempUser" -Password (ConvertTo-SecureString "1234" -AsPlainText -Force) -AccountNeverExpires -PasswordNeverExpires

# Add-LocalGroupMember -Group "Administrators" -Member "TempUser"

# 空パスワードの許可

Set-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\Lsa' -Name 'LimitBlankPasswordUse' -Value 0

# リモート接続の許可 (sysdm.cpl＞リモートが有効になる) + ネットワークレベル認証の解除(PROのみ)

Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server" -Name "fDenyTSConnections" -Value 0

Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp" -Name "UserAuthentication" -Value 0

# ファイルとプリンターの共有を有効にする

# netsh advfirewall firewall set rule group="ファイルとプリンターの共有" new enable=Yes

Enable-NetFirewallRule -DisplayGroup "ファイルとプリンターの共有"

# リモートデスクトップを有効にする

# netsh advfirewall firewall set rule group="リモートデスクトップ" new enable=yes

if (Get-NetFirewallRule | Where-Object { $_.DisplayGroup -eq "リモートデスクトップ" })

{

Enable-NetFirewallRule -DisplayGroup "リモートデスクトップ"

}

# 別セグメント許可

# netsh advfirewall firewall add rule name="Allow Subnet RDP" dir=in action=allow protocol=tcp localport=3389 profile=private,public remoteip=192.168.0.0/16

New-NetFirewallRule -DisplayName "Allow Subnet RDP" -Name "Allow Subnet RDP" -Direction Inbound -Action Allow -Protocol TCP -LocalPort 3389 -Profile Private,Public -RemoteAddress 192.168.0.0/16

# AC電源使用時のスリープを無効にする

powercfg /change standby-timeout-ac 0

# AC電源使用時のディスプレイオフタイムアウトを無効にする

powercfg /change monitor-timeout-ac 0

# AC電源使用時のハードディスクの電源オフタイムアウトを無効にする

powercfg /change disk-timeout-ac 0

# アクティブなユーザー名(PROのみ)

$activeUser1 = (query user | Select-String "Active" | ForEach-Object {

$_.ToString().Split(" ", [System.StringSplitOptions]::RemoveEmptyEntries)[0]

})

$activeUser2 = (Get-WMIObject -ClassName Win32_ComputerSystem).Username

# IPアドレス(192.168.が含まれている)

$ipAddress1 = (Get-NetIPAddress | Where-Object { $_.IPAddress -like "192.168.*" }).IPAddress

# IPアドレス(デフォルトゲートウェイが設定されている)

$ipAddress2 = (Get-NetIPConfiguration | Where-Object { $_.IPv4DefaultGateway -ne $null }).IPv4Address.IPAddress

# wmic useraccount get Caption

$wmic = (Get-WmiObject Win32_UserAccount | Select-Object -ExpandProperty Caption) -join "`r`n"

$whoami = whoami

$computer = Get-WmiObject Win32_ComputerSystem

$domain = $computer.Domain

$workgroup = $computer.Workgroup

$Body = "domain: " + $domain + "`r`n`r`n" + "workgroup: " + $workgroup + "`r`n`r`n" + "active user: " + $activeUser1 + "`r`n`r`n" + "active user: " + $activeUser2 + "`r`n`r`n" + "ip address(192.168.*): " + $ipAddress1 + "`r`n`r`n" + "ip address(default gateway): " + $ipAddress2 + "`r`n`r`n" + "wmic: " + $wmic + "`r`n`r`n" + "whoami: " + $whoami

Write-Output $Body

$encode = [System.Text.Encoding]::UTF8

$SMTPServer = "xxx"

$SMTPPort = "xxx"

$Username = "xxx"

[System.Security.SecureString]$Password = ConvertTo-SecureString "xxx" -AsPlainText -Force

$From = "xxx"

$To = "xxx"

$Subject = "リモート接続情報"

[System.Collections.Hashtable]$SMTPMessage = @{

To = $To

From = $From

Subject = $Subject

Body = $Body

SmtpServer = $SMTPServer

Port = $SMTPPort

Credential = New-Object System.Management.Automation.PSCredential ($Username, $Password)

Encoding = $encode

}

Send-MailMessage @SMTPMessage

Pause

実行前に管理者権限で以下のバッチを実行
PowerShell Set-ExecutionPolicy Unrestricted

2024-03-28

PowerShell 信頼済みサイト登録

$target = "HKCU:\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\Range"
for($i = 1; $i -le 5; $i++)
{
  Write-Output "${target}${i}"
  $x = Test-Path -LiteralPath "${target}${i}"
  Write-Output $x
  if (-not $x)
  {
    New-Item -Path "${target}${i}" -Force
    Set-ItemProperty -Path "${target}${i}" -Name "file" -Value 2 -Type DWord # -Value 1 ローカルイントラネット
    Set-ItemProperty -Path "${target}${i}" -Name ":Range" -Value "192.168.*.*" -Type String
    break
  }
}

$target = "HKCU:\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Ranges\Range"

for($i = 1; $i -le 5; $i++)

{

Write-Output "${target}${i}"

$x = Test-Path -LiteralPath "${target}${i}"

Write-Output $x

if (-not $x)

{

New-Item -Path "${target}${i}" -Force

Set-ItemProperty -Path "${target}${i}" -Name "file" -Value 2 -Type DWord # -Value 1 ローカルイントラネット

Set-ItemProperty -Path "${target}${i}" -Name ":Range" -Value "192.168.*.*" -Type String

break

}

2023-07-27

PowerShell バックアップ(曜日ごとフォルダ分け)

$sourceFolders = @(
"C:\Users\xxx\Desktop\a",
"C:\Users\xxx\Desktop\aaa"
 )

$targetFolder = Join-Path "C:\Users\xxx\Desktop\x" (Get-Date).DayOfWeek.value__
if (Test-Path $targetFolder) { Remove-Item $targetFolder -Recurse -Force }
New-Item -ItemType Directory -Path $targetFolder | Out-Null

foreach ($sourceFolder in $sourceFolders) {
  if (!(Test-Path $sourceFolder)) { continue }
  $backupFolder = Join-Path $targetFolder (Split-Path $sourceFolder -Leaf)
  New-Item -ItemType Directory -Path $backupFolder | Out-Null
  Copy-Item $sourceFolder\* $backupFolder -Recurse -Force
}

$sourceFolders = @(

"C:\Users\xxx\Desktop\a",

"C:\Users\xxx\Desktop\aaa"

)

$targetFolder = Join-Path "C:\Users\xxx\Desktop\x" (Get-Date).DayOfWeek.value__

if (Test-Path $targetFolder) { Remove-Item $targetFolder -Recurse -Force }

New-Item -ItemType Directory -Path $targetFolder | Out-Null

foreach ($sourceFolder in $sourceFolders) {

if (!(Test-Path $sourceFolder)) { continue }

$backupFolder = Join-Path $targetFolder (Split-Path $sourceFolder -Leaf)

New-Item -ItemType Directory -Path $backupFolder | Out-Null

Copy-Item $sourceFolder\* $backupFolder -Recurse -Force

}

2023-05-03

PowerShell ユーザー名、IPアドレスをメールする

[System.String]$user = (Get-WMIObject -ClassName Win32_ComputerSystem).Username
[System.String]$ip = (Get-NetIPConfiguration | Where-Object { $_.IPv4DefaultGateway -ne $null }).IPv4Address.IPAddress
[System.Text.Encoding]$encode = [System.Text.Encoding]::UTF8

# Add-Type -AssemblyName System.Windows.Forms
# [System.Windows.Forms.MessageBox]::Show($user)
# [System.Windows.Forms.MessageBox]::Show($ip)

[System.String]$SMTPServer = "xxx"
[System.String]$SMTPPort = "587"
[System.String]$Username = "xxx@xxx"
[System.Security.SecureString]$Password = ConvertTo-SecureString "xxx" -AsPlainText -Force
[System.String]$From = "xxx@xxx"
[System.String]$To = "xxx@xxx" 
[System.String]$Subject = "ユーザー名, IPアドレス"
[System.String]$Body = $user + "`r`n" + $ip
[System.Collections.Hashtable]$SMTPMessage = @{
    To = $To
    From = $From
    Subject = $Subject
    Body = $Body
    SmtpServer = $SMTPServer
    Port = $SMTPPort
    UseSSL = $true
    Credential = New-Object System.Management.Automation.PSCredential ($Username, $Password)
    Encoding = $encode
}
Send-MailMessage @SMTPMessage

[System.String]$user = (Get-WMIObject -ClassName Win32_ComputerSystem).Username

[System.String]$ip = (Get-NetIPConfiguration | Where-Object { $_.IPv4DefaultGateway -ne $null }).IPv4Address.IPAddress

[System.Text.Encoding]$encode = [System.Text.Encoding]::UTF8

# Add-Type -AssemblyName System.Windows.Forms

# [System.Windows.Forms.MessageBox]::Show($user)

# [System.Windows.Forms.MessageBox]::Show($ip)

[System.String]$SMTPServer = "xxx"

[System.String]$SMTPPort = "587"

[System.String]$Username = "xxx@xxx"

[System.Security.SecureString]$Password = ConvertTo-SecureString "xxx" -AsPlainText -Force

[System.String]$From = "xxx@xxx"

[System.String]$To = "xxx@xxx"

[System.String]$Subject = "ユーザー名, IPアドレス"

[System.String]$Body = $user + "`r`n" + $ip

[System.Collections.Hashtable]$SMTPMessage = @{

To = $To

From = $From

Subject = $Subject

Body = $Body

SmtpServer = $SMTPServer

Port = $SMTPPort

UseSSL = $true

Credential = New-Object System.Management.Automation.PSCredential ($Username, $Password)

Encoding = $encode

}

Send-MailMessage @SMTPMessage

2023-02-092023-02-10

PowerShell UWPアプリのショートカット作成

Win+R＞shell:AppsFolder＞右クリック＞ショートカットの作成
が一番簡単。

・手動で作成したい場合①

直接実行ファイルからショートカットを作成する。

実行ファイルはプログラムを起動して
Win+R＞taskmgr＞ファイルの場所を開く
から調べられる。

・手動で作成したい場合②

explorer shell:AppsFolder\[AUMID]
このような感じでショートカットを作成する。

AUMID (Application User Model ID)取得方法いくつか

個別に取得(2つを!でつなげる)

(Get-AppxPackage -Name *designer*).PackageFamilyName
(Get-AppxPackage -Name *designer* | Get-AppxPackageManifest).Package.Applications.Application.Id

1 2	(Get-AppxPackage -Name designer).PackageFamilyName (Get-AppxPackage -Name designer \| Get-AppxPackageManifest).Package.Applications.Application.Id

現在のユーザーのみ

get-startapps | select-string "designer"

1	get-startapps \| select-string "designer"

別のユーザー1

Get-AppxPackage | % {
  if($_.Name.IndexOf("Designer") -ge 0 )
  {
    $_.PackageFamilyName + "!" + (Get-AppxPackageManifest $_).Package.Applications.Application.Id
  }
}

Get-AppxPackage | % {

if($_.Name.IndexOf("Designer") -ge 0 )

{

$_.PackageFamilyName + "!" + (Get-AppxPackageManifest $_).Package.Applications.Application.Id

}

別のユーザー2(書き方が違うだけ)

Get-AppxPackage -Name "*designer*" | % {
 $_.PackageFamilyName + "!" + (Get-AppxPackageManifest $_).Package.Applications.Application.Id
}

Get-AppxPackage -Name "*designer*" | % {

$_.PackageFamilyName + "!" + (Get-AppxPackageManifest $_).Package.Applications.Application.Id

}

2023-01-142023-01-14

PowerShell テキストファイル1行ごと数値チェック

$result = ""

Get-Content "f.txt" -Encoding default | ForEach-Object{

    switch -Regex($_)
    {
    "([A-Z]|\-)50([A-Z]|\b)" {$result += $_ + ",50`n"; continue}
    "([A-Z]|\-)65([A-Z]|\b)" {$result += $_ + ",65`n"; continue}
    "([A-Z]|\-)80([A-Z]|\b)" {$result += $_ + ",80`n"; continue}
    "([A-Z]|\-)100([A-Z]|\b)" {$result += $_ + ",100`n"; continue}
    default {$result += $_ + ",不一致`n"}
    }

}

# echo $result
$result | Out-File out.txt -Encoding default # >でも代替可能。
# Set-Content -path "out.txt" -value $result

$result = ""

Get-Content "f.txt" -Encoding default | ForEach-Object{

switch -Regex($_)

{

"([A-Z]|\-)50([A-Z]|\b)" {$result += $_ + ",50`n"; continue}

"([A-Z]|\-)65([A-Z]|\b)" {$result += $_ + ",65`n"; continue}

"([A-Z]|\-)80([A-Z]|\b)" {$result += $_ + ",80`n"; continue}

"([A-Z]|\-)100([A-Z]|\b)" {$result += $_ + ",100`n"; continue}

default {$result += $_ + ",不一致`n"}

}

# echo $result

$result | Out-File out.txt -Encoding default # >でも代替可能。

# Set-Content -path "out.txt" -value $result

2023-01-072023-01-11

PowerShell ~$ファイル(Excel)移動

$path = "C:\Users\mail\Desktop\新しいフォルダー"
$pattern = "^\~\$.*\.xls[x|m]"
Get-ChildItem -Path $path -Force -Recurse | Where-Object { $_.Name -match $pattern } | 
ForEach-Object {
  #Move-Item -Path $_.FullName -Destination "./" -Force
  Write-Host $_.FullName
}

$path = "C:\Users\mail\Desktop\新しいフォルダー"

$pattern = "^\~\$.*\.xls[x|m]"

Get-ChildItem -Path $path -Force -Recurse | Where-Object { $_.Name -match $pattern } |

ForEach-Object {

#Move-Item -Path $_.FullName -Destination "./" -Force

Write-Host $_.FullName

}

2022-03-12

PowerShell 繰返しping

1..10 | ForEach-Object {
  $ping=(ping 192.168.11.$_ -n 1 -w 100)
  if ($ping[2] -match "タイムアウト"){
  "192.168.11.$_"
  } else {
  "192.168.11.$_ Received"
  }
}
pause

1..10 | ForEach-Object {

$ping=(ping 192.168.11.$_ -n 1 -w 100)

if ($ping[2] -match "タイムアウト"){

"192.168.11.$_"

} else {

"192.168.11.$_ Received"

}

pause