Code Snippets

### Step 1: Creating Securestring $password = Read-Host -AsSecureString $password | ConvertFrom-SecureString | Out-File .\Desktop\password.txt ### Step 2: Using Securestring in Scripts $username = "Administrator" $password = Get-Content .\Desktop\password.txt | ConvertTo-SecureString $credentials = New-Object System.Management.Automation.PSCredential (“$username”, $password)

$password = "Test1234" | ConvertTo-SecureString -AsPlainText -Force $username = "Administrator" $credentials = New-Object System.Management.Automation.PSCredential (“username”, $password)

Write-Host "Bitte geben Sie die Benutzerdaten ein" $credentials = Get-Credential -Credential Administrator

RunspaceId : 6ac12cb7-50d4-409f-988a-db75b052e5bb ObjectModified : /schweigers.at/Users/Kevin CmdletName : Set-Mailbox CmdletParameters : {Identity, DisplayName} ModifiedProperties : {DisplayName} Caller : api@schweigers.local ExternalAccess : False Succeeded : True Error : RunDate : 01.06.2020 20:07:22 OriginatingServer : EX01 (15.01.1979.002) Identity : AAMkAGZhYTY4ZTJhLTkyNjctNDc5Ny1hMjYyLWRmZWE5Yjk1YWFmOABGAAAAAACuoKglPoqYSYE1e/HZITnnBwADdTJFuJn4Rb j9jGDdbjGxAAAAAAEbAAADdTJFuJn4Rbj9jGDdbjGxAADhP9DGAAA= IsValid : True ObjectState : New

[PS] C:\Windows\system32>Add-RoleGroupMember -Identity "Service Desk" -Member Max.Mustermann

[PS] C:\Windows\system32>New-ManagementRoleAssignment -Role "Mail Recipients" -SecurityGroup "Service Desk" -RecipientOrganizationalUnitScope "schweigers.local/Schweigers/User" [PS] C:\Windows\system32>New-ManagementRoleAssignment -Role "Message Tracking" -SecurityGroup "Service Desk" -RecipientOrganizationalUnitScope "schweigers.local/Schweigers/User" [PS] C:\Windows\system32>New-ManagementRoleAssignment -Role "Reset Password" -SecurityGroup "Service Desk" -RecipientOrganizationalUnitScope "schweigers.local/Schweigers/User" [PS] C:\Windows\system32>New-ManagementRoleAssignment -Role "User Options" -SecurityGroup "Service Desk" -RecipientOrganizationalUnitScope "schweigers.local/Schweigers/User"

[PS] C:\Windows\system32>New-RoleGroup -Name "Service Desk" -DisplayName "Service Desk" -ManagedBy "Organization Management"

Add-RoleGroupMember "Security Administrator" -Member "Administrator" -BypassSecurityGroupManagerCheck

New-ManagementRoleAssignment -SecurityGroup "Organization Management" -Role "Reset Password"

Add-PSSnapin Microsoft* Install-CannedRbacRoles Install-CannedRbacRoleAssignments