PowerShell Scripts



Let see some of the most useful PowerShell commands in SharePoint to perform below activities.

Read SMTP Outgoing Mail Address from Central Administration
Get/Set Primary and Secondary Site Administrator
Remove user from Site Collection Admin
Remove user from Site Groups
Set user from direct web Roles Permissions


Read SMTP Outgoing Mail Address from CA

function LoadEmailConfig()
{
    try
    {   
        $caWebApp = (Get-SPWebApplication -IncludeCentralAdministration) | ? { $_.IsAdministrationWebApplication -eq $true } 
        Write-Host("SmtpServer: " + $caWebApp.OutboundMailServiceInstance.Server.Address)
        Write-Host("FromAdress: " + $caWebApp.OutboundMailSenderAddress)
    }
    catch
    {
        WriteToLog ("Trying to get eMail Configuration from Central Admin. Exception:- " + $_.exception.message)
    }

Get/Set Primary/Secondary Site Administrator

function GetAdmins()
{
    $site = Get-SPSite "https://site.domain.com/sites/sitecollection"
    Write-Host("Primary Site Admin:   " + $site.Owner)
    Write-Host("Secondary Site Admin: " + $site.SecondaryContact)
}

function SetAdmins()
{
    $RootSite = Get-SPWebApplication "https://site.domain.com"
    $newAdminUser = $RootSite.Sites[0].RootWeb.EnsureUser("domain\rathanavel")

    foreach($site in $RootSite.Sites)
    {
        if($site.Owner.UserLogin.Split('\\')[1] -eq "ratsub")
        {
            Write-Host("User found in Primary Site Admin: " + $site.Owner.UserLogin)

            try
            {
                Set-SPSite -Identity $site -OwnerAlias $newAdminUser
                Write-Host("New Primary Site administration configured.")
            }
            catch
            {
                Write-Host([String]::Format("Unable to change Primary Site Admin from {0} to {1}: {2}", $site.Owner.UserLogin , $fallbackUser.LoginName, $_.Exception.Message))
            }
        }

        if($site.SecondaryContact.UserLogin.Split('\\')[1] -eq "ratsub")
        {
            Write-Host("User found in Secondary Site Admin: " + $site.SecondaryContact.UserLogin)

            try
            {
                Set-SPSite -Identity $site -SecondaryOwnerAlias $newAdminUser
                Write-Host("New Secondary Site administration configured.")            
            }
            catch
            {
                Write-Host([String]::Format("Unable to change Secondary Site Admin from {0} to {1}: {2}", $site.SecondaryContact.UserLogin , $fallbackUser.UserLogin, $_.Exception.Message))
            }
        }
    }
}

Remove user from Site Collection Admin:

function CheckAndRemoveSiteCollectionAdmin
{
    $RootSite = Get-SPWebApplication "https://site.domain.com"
    #$userToRemove = $RootSite.Sites[0].RootWeb.EnsureUser("domain\ratsub")
    $userToRemove = "ratsub@domain.com"

    foreach($site in $RootSite.Sites)
    {
        $admIds = New-Object System.Collections.ArrayList
        
        #Check in Site collection admins
        foreach($siteAdmin in $site.RootWeb.SiteAdministrators)
        {
            try
            {
                #if($siteAdmin.UserLogin.Split('\\')[1] -eq $userToRemove.UserLogin.Split('\\')[1])
                if($siteAdmin.Email -eq $userToRemove.Email)
                {
                    write-host ("User found:- " + $siteAdmin.LoginName)
                    $admIds.Add($siteAdmin.ID)
                }
            }
            catch
            {
                Write-Host ("Add user to array from Site Collection Admin. Exception message:  "  +  $_.Exception.Message) 
            }
        }
        

        #Remove user from Site Collection admin if exist
        foreach($admUser in $admIds)
        {
            try
            {
                $site.RootWeb.SiteAdministrators.RemoveByID($admUser)
                Write-Host ("User removed.")
            }
            catch
            {
                Write-Host ("Remove user from Site Collection Admin. Exception message:  "  +  $_.Exception.Message) 
            }            
        }
    }
}

Remove user from Site Groups

function RemoveUserFromSiteGroups
{
    $RootSite = Get-SPWebApplication "https://site.domain.com"
    #$userToRemove = $RootSite.Sites[0].RootWeb.EnsureUser("domain\ratsub")
    $userToRemove = "ratsub@domain.com"

    foreach($site in $RootSite.Sites)
    {
        foreach($web in $site.AllWebs)
        {
            Write-Host ("Checking Web: " + $web.Url)
            try
            { 
                # Loop only if $web has boken inheritance
                if($web.HasUniqueRoleAssignments -eq $true)
                {
                    # Loop all site groups
                    foreach ($grp in $web.SiteGroups)
                    {
                        try
                        {                            
                            $lstUserIds = New-Object System.Collections.ArrayList
                
                            # Loop users to check and add to remove array if user exist
                            foreach ($user in $grp.Users) 
                            {
                                try
                                {                        
                                    if($user.Email -eq $userToRemove.Email)
                                    {                            
                                        $lstUserIds.Add($user.ID)
                                        Write-Host ("User found in group : " + $user.LoginName + " | " + $grp.Name)
                                    }
                                }
                                catch
                                {
                                     Write-Host ("Exception inside AllWeb->Web->GroupLoop->Add user id in array. Error message: "  +  $_.Exception.Message)
                                } 
                            }

                            # Remove array users from group
                            foreach($id in $lstUserIds)
                            {
                                try
                                {
                                    $usr = $grp.Users | ? { $_.ID -eq $id } 
                                    $userDeleted = $usr.UserLogin
                    
                                    $grp.Users.RemoveByID($id)

                                    write-host ("Removed User From Group:- User: " + $userDeleted + "|| Group:" + $grp.Name)
                                }
                                catch
                                {
                                     Write-Host ("Exception inside AllWeb->Web->GroupLoop->Remove user from group. Error message: " + $_.Exception.Message)
                                }
                            }
                        }
                        catch
                        {
                             Write-Host ("Exception in foreach Group loop: " + $_.Exception.Message)
                        }
                    }
                }
            }
            catch
            {
                Write-Host ("Exception in AllWeb->Web loop: " + $_.Exception.Message)
            }
        }
    }
}

Set user from Direct web Roles Permissions

function RemoveUserWebRolePermissions
{
    $RootSite = Get-SPWebApplication "https://site.domain.com"
    #$userToRemove = $RootSite.Sites[0].RootWeb.EnsureUser("domain\ratsub")
    $userToRemove = "ratsub@domain.com"

    foreach($site in $RootSite.Sites)
    {
        foreach($web in $site.AllWebs)
        {
            Write-Host ("Checking Web: " + $web.Url)
            try
            {
                # Loop direct web Role assignments permissions
                $lstIds = New-Object System.Collections.ArrayList
                foreach($role in $web.RoleAssignments)
                {
                    try
                    {                                               
                        if($role.Member.GetType().ToString() -eq "Microsoft.SharePoint.SPUser")
                        {
                            if($role.Member.Email -eq $userToRemove.Email)
                            {
                                $lstIds.Add($role.Member.ID)
                                Write-Host ("User found in web RoleAssignments:- User: " + $role.Member.LoginName + " || Url: " + $web.Url)                               
                            }
                        }
                    }
                    catch
                    {
                        Write-Host ("Exception in foreach loop RoleAssignments->Add id in array: " + $_.Exception.Message)
                    }
                }

                # Remove users from current role
                foreach($id in $lstIds)
                {
                    try
                    {
                        $usr = $web.RoleAssignments | ? { $_.Member.ID -eq $id }                 
                        $userDeleted = $usr.Member.Name
                        
                        $web.RoleAssignments.RemoveByID($id);

                        write-host ("Deleted User Permissions From Web:- User: " + $userDeleted + " || Url: " + $web.Url)                   
                        
                    }
                    catch
                    {
                        Write-Host("Exception in foreach loop RoleAssignments->Remove user from role assignments: " + $_.Exception.Message)
                    }
                }
            }
            catch
            {
                Write-Host ("Exception in AllWeb->Web loop: " + $_.Exception.Message)
            }
        }
    }
}
Will see more commands and scenarios in the upcoming series.
Related Articles:
PowerShell Part 2
List all servers in sharepoint farm C#
SharePoint server recycle/stop/start pools using C#
Enable/Disable SharePoint OOTB SPAlerts using PowerShell

-Ratsub

Comments

Post a Comment

Enter your comments..

Popular posts from this blog

Secure When a HTTP request is received Power Automate a.k.a MS Flow

Image
Secure "When a HTTP request is received" connector in MS Flow This connector can act as the Incoming webhook and perform underling business functionality but its very important to protect it to receive payload from unknown audience. lets see the steps to secure this incoming request. Add `when a HTTP request is received as a trigger condition` Provide the required payload a per the needs (optional). change method to POST if you need to use the payload (optional) relativePath: add /{token} (required) Click the ... dots and select "settings" @equals(triggerOutputs()['relativePathParameters']['token'],'YOUR-SECRET-PASSWORD') That's it. your business logic continues... I have added the received 'token' and 'firstName' from my payload for testing. Call the webhook from postman. Replace /{token} from the URL with your secret password. Enter the required payload and click send. Notice : S...
Read more

People picker Control in PowerApps

Image
With the latest PowerApps update we can do more customization to achieve more use-cases. Especially with the new "Rule" feature in PowerApps(which keeps remembers me of InfoPath form 😏) But, Then I was looking for People picker control in this latest PowerApps update. cant find any straight forward control thought. But now saw a connector called "Office365Users" then I started exploring it. How to create People picker control in PowerApps Update 1. Add  "Office365Users" data source to the app. 2.  Insert a "Combobox" from the ribbon. 3. Select "Combobox" and select 'Items' in the formula bar then enter below formula Office365Users . SearchUser ({searchTerm :  ComboBox1. Text }) 4. Then, select "Fields" from the property pane and choose "Primary text" a.k.a "Display Names" and "Search Fields". 5. Play the app and test it. The below steps applies mostly in the early st...
Read more

Upload attachment to SharePoint list item using Microsoft Flow

Image
Microsoft Flow is one of the Microsoft offerings for automation. In this series will see how to upload a file to SharePoint ListItem using MSFlow Workflow for our scenario Login to Microsoft Flow site  and log in to create a new flow. Add action and Type 'Data Operations' connector. Then choose 'Data operations - Compose' action Select 'Expression' tab and enter the following to create 'ListName' variable Repeat this process for all other variables  ListName - SharePoint list name. ItemID     - SPList item ID. AttachmentContent - Actual attachment content. FileName - Attchment name. Expressions: we can read values from Query String will discuss how to pass them next article. ListName: trigger() [ 'outputs' ][ 'queries' ][ 'listname' ] ItemID: trigger() [ 'outputs' ][ 'queries' ][ 'itemid' ] At...
Read more

Approval and auto escalation with time out in Microsoft Flow

Image
Let's see how to create an Approval workflow with timeout and escalation. I have used Office 365 Custom List "item created or modified" as my trigger. Create "Supervisor Approval" Create "Escalation Approval" Specify duration in ISO 8601 format. refer here for more time-out formatting. "Escalation Approval" would trigger only after the "Supervisor Approval timeout" Final Flow -Ratsub
Read more

Modern page provisioning using page template

Image
In this article let's see how to dynamically provision a modern page based on a modern page template and update its webpart properties using pnp/js in SPFx React webpart. Create a modern page template Create a page and add the webpart as per your requirements, finally save it as a template. it will be stored under the  "Templates" folder in SitePages. In the below example I have as Section=>3 Colum layout=>3 webparts. Create a page provision form component public   render ():  React . ReactElement < IDynamicPageCreaterProps > {      let   thisHandler  =  this ;      return  (        < div >          < h1 > { this . props . webpartName } </ h1 >           {           ( this . props . selectedTemplate  !=  undefined )...
Read more

Headless-Daemon calling AAD secured API

Image
In AAD series of articles, we will see how to call the AAD protected secure API from a headless (or) console application and its authentication flows and scenarios. In the previous article, we have seen how to register an app in aad . I recommend you to read to get familiar with the app registration concept. How to call the AAD protected secure API from a headless (or) console application For these types of non-interactive clients, we can use 2 types of authentication flows for different scenarios.    - client_credentials_grant    - username/password The above grant types allow clients to authenticate silently without any user interaction. oAuth 2.0  client_credentials_grant Authentication is done bas ed on the valid "Client Secret" used, so this is available only for the "WebApp Type" app registrations. and copy the below information from the respective app registration for later use.      - ClientID: Client App's ...
Read more

Developing custom reusable components in PowerApps

Image
I am very excited to see the latest PowerApps Experimental preview feature  for canvas based PowerApps development & its capabilities. It provides you with the ability to increase your productivity and re-use the same component on all available layouts.  Design & develop it once reuse the component across layouts within PowerApps. How to enable the experimental feature in PowerApps? Step1 - Go to File->App Settings. Step2 - Select Advanced Settings-> Experimental feature->Enable Components The above feature is not listed; then possibly your are not created developer preview environment. Follow these official MSDN instructions . Also, it's important to understand the  Preview & Experimental feature . Create Carousel reusable component in PowerApps Step 1- Click add "New component. Step 2- Add all necessary controls             -> Image control.     ...
Read more

Step-By-Step Azure AD App Registration

Image
Enterprise developers and software-as-a-service (SaaS) providers can develop commercial cloud services or line-of-business applications, that can be integrated with Azure Active Directory (Azure AD) to provide secure sign-in and authorization for their services. To integrate an application or service with Azure AD, a developer must first register the application with Azure AD. Any application that wants to use the capabilities of Azure AD must first be registered in an Azure AD tenant. This registration process involves giving Azure AD details about your application, such as the URL where it’s located, the URL to send replies after a user is authenticated, the URI that identifies the app, and so on.  In the upcoming series of articles will see different 'grant_type' and which one to use for what scenario? how to use in Daemon-Headless-App calling secure WebAPI - client_credentials/password_credentials how to use in Windows-Forms-App calling secure WebAPI - cod...
Read more

HTML field & Date Time formatting in powerapps

Image
Hi All, When i dig around powerapps found an interesting control called HTML field. the potential of this control is enormous based on the scenario lets see couple of examples. 1. Formatting Datetime Go to insert -> Text=>HTML Text Insert the control in the list view Add the below in the formula box Concatenate(" < div style = 'height:100%;width:100%;padding:1px;background-color: #418bca;border-right: 1px solid #fff;float:left;' > < div style = 'position: relative;text-align: center;color: #fff;font-size:20px;padding:0px 3px;' > ",Text(DateTimeValue(Text(Modified)),"dd")," < h4 style = 'margin: 5px 0 0 0;color: #fff;text-align: center;' > ",Upper(Text(DateTimeValue(Text(Modified)),"mmm-yy"))," </ h4 > </ div > ") i.e. Concatenate(" < html > ",Text(DateTimeValue(Text(Modified)),"dd")," < html > ")  Output Note :...
Read more

Create and configure custom connectors for PowerApps and MSFlow from AzureFunctions

Image
I have already discussed How to Create, Configure and Deploy AzureFunction using VisualStudio  and how to create swagger(OpenApi) endpoint for AzureFunctions .  So, In this article will see how to import and use them in PowerApps & MSFlow .  Upon completion of yaml  definition creation, Click->Export to PowerApps + Flow button or copy the API definition URL. Alternatively you can also download  ApiDef.json file. Go to  https://web.powerapps.com  and authenticate then select 'Custom Connectors' from the left navigation. Then Click Create custom connector->Import an OpenApi from URL as mentioed below. Enter function secret code which we copied earlier, Then name the connector and click Contiue. Now, Fill values in each wizard General -> Upload/configure connector icon. Security -> In my scenario I used 'Function' scope access. configure it as appropriate. Definition -...
Read more