CONNECT WITH US

ConnectWise Automate: Using parameters in PowerShell scripts

  • October 28, 2024
  • ProVal Technologies, Inc
  • Tech Tuesday

Showing you how to effectively use parameters in PowerShell scripts, making your scripts more flexible and efficient. Whether you’re looking to automate user account management or want a deeper understanding of script execution, this video has got you covered.

Step By Step:

  1. Start by creating a PowerShell script that can create an admin account, either local or domain admin, based on the machine it’s being run on.
  2. If the script is run on a domain controller, it will create a domain admin account and generate a random password.
  3. Set the random password length between 16 and 21 characters.
  4. The script should be able to dynamically change the username, title, and display name of any user.
  5. The script should also update a password ID in Automate under the client, using the correct information, If the password ID already exists, it will use the existing password to deploy a custom password without generating a random string. The script will first check if the password ID or title provided exists in the system. If the password ID or title exists, it will use the existing password. If it doesn’t exist, the script will generate a random password and insert it into the database with the specified title.
  6. Write the actual PowerShell script to the machine, ensuring it will work to create a new domain or local admin, or update the password of an existing one.
  7. The script can be used to deploy a technician’s domain admin account across all machines, ensuring the correct parameters are provided.
  8. Redact the command history in the script (e.g., line 33) to hide the password in plain text for security reasons.
  9. Submit the password in plain text during the command execution, but redact it from the command history to avoid exposure.
  10. Encrypt the password fully using the password table to protect it.
  11. Update the password in the system or insert a new password entry into the database.
  12. After running the script and creating the domain or local admin account, clean up by deleting the folder where the script was stored on the machine.
  13. To ensure the script remains secure, avoid leaving it on the machine after use, as it could be used maliciously.
  14. If creating a PowerShell script that requires parameters, you can use a security application that excludes the script based on its hash.
  15. Create the script to ensure it doesn’t change, so security software can exclude its hash and allow it to run without being blocked.
  16. Add a “Generate Hashino” parameter to the script.
  17. Running the script with this parameter set to 1 will send an email containing the MD5 and SHA-256 hashes
  18. Use these hashes to exclude the script from being scanned by security software.
  19. Be aware that excluding the script from security software can pose a security risk, which is why it’s important to delete the script after use.
  20. Replace any special characters in the SQL commands to prevent interference with the insertion process.
  21. Replace random characters that could cause issues during importing with characters that won’t cause problems
  22. Finally, clean up by ensuring the folder containing the script is deleted, reducing the risk of the script being used maliciously.

Need help scaling your MSP?

Let's Talk!

They truly act as an extension of our team, providing the right consulting support exactly when we need it.

ProVal brings deep, hands-on knowledge of how ConnectWise PSA really works, combined with a thoughtful, consultative approach that sets them apart.

They listen first—both to understand our environment and who we are as an organization—and focus on finding the right solutions rather than pushing products. With strong command of best practices and experience across many MSP environments, they truly act as an extension of our team, providing the right consulting support exactly when we need it.

michael-lafond
Michael LaFond
ConnectWise Program Manager
New Charter Technologies

ConnectWise Automate: Using parameters in PowerShell scripts

YouTube Thumbnail (7)

I truly view ProVal as a partner and extension of my team, not as one of my vendors

When our NOC Manager left last fall we wanted to replace the position with an outsourced NOC to reduce headcount, and bring in an expert to both Labtech and our backup solutions. Bringing in ProVal Technologies was one of the best decisions we made last year and has paid for itself.During our first few monthly recurring Labtech admin meetings the ProVal team discovered incorrect settings and policies that were not applying correctly in our Labtech server. Things that we thought were automated and working were not. For example, there were multiple scripts and policies running but set to do nothing such as disk cleanup scripts. Cisco Umbrella was not configured correctly. Server alerting was not set right and the list went on.The backup team sends daily and weekly reports and updates that reduce my technicians time that we used to spend on backup or antivirus tickets that took forever and were tedious.ProVal also brings in great insights to our business and really cares about our success. They will frequently mention to me in meetings what new scripts they can import to make us more efficient or will schedule upgrades to our backups, Labtech, etc so I don’t have to worry. I truly view ProVal as a partner and extension of my team not as one of my vendors.

Chris-Warnick-Headshot
Chris Warnick
Vision Computer Solutions
Northville, MI

They will quickly become an extension of your team and your ROI will reflect the results

We have been a long time user of Labtech and had tried for many years to manage the product internally with no real success at the level we needed to make our solutions more efficient for our customers. Once we hired Vikram and his team at ProVal, it solved all our pain points with the product and we really felt like we were leveraging the tool as it was designed. If this sounds like you and it’s keeping you up at night, then you need these guys. They will quickly become an extension of your team and your ROI will reflect the results.

Bryan-Wolff-Headshot
Bryan Wolff
CEO, Wolff Logics LT Managed & Admin Services
Cedar Park, Texas

They work well, fast and on budget

We met Vikram from ProVal Tech at Gary Pica’s Shnizzfest a year ago. Vikram explained the advantage of having trained, certified personnel take care of our recent Automate implementation. Even though we had taken an implementation package from ConnectWise to start up the program, we felt many custom configurations we needed for our business were lacking. We hired ProVal Tech after Automate was installed to help us with this task. From sales to technicians everyone was professional and knowledgeable. Onboarding was simple, and well documented. Tools on the web were supplied while we did the work, and they allowed us to track what was done, and see the improvements in the environment. It was easy to reach any of the team members, for any concern or question – all answered with courtesy and smile. Once the work was finished, we were given some training and explanations, add to that documentation, about the work and the scripts and features added to the program. We have been happily working with Automate since then. We can only recommend this efficient team of people for any work into Automate: they work well, fast and on budget.

Ben-Prevost-Headshot
Ben Prevost
FarWeb IT
Sherbrooke, Canada
Copy link
CopyCopied