Hyper-V Lab
My home lab consistats of a single Hyper-V Server 2019 hosted on an old MacMini.
I try to script out every action I possibly can to keep my work repeatable and maintain a history of my actions. These scripts represent some of that work.
PowerShell Scripts
| New-MSSAVM |
|---|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52 | function New-MSSAVM {
[CmdletBinding()]
param (
[Parameter(Mandatory, ValueFromPipeline)]
[string]$VMName,
[Int64]$MemorySize = 4GB,
[Int64]$StorageSize = 100GB
)
begin {
if (-not (Get-VMSwitch -Name "External Virtual Switch" -ErrorAction SilentlyContinue)) {
Write-Host "Creating new internal switch called External Virtual Switch" -ForegroundColor Green
New-VMSwitch -Name "External Virtual Switch" -NetAdapterName "Ethernet"
}
}
process {
# If the Virtual Machine already exists, kill the script; Names should be unique
$VM = If (Get-VM $VMName -ErrorAction SilentlyContinue) {
Write-Error "Virtual Machine with name $VMName already exists."
Exit
} else {
Write-Host "Creating new Virtual Machine called $VMName with $([math]::round($MemorySize/1GB, 2))GB memory and a $([math]::round($StorageSize/1GB, 2))GB VHDX." -ForegroundColor Green
New-VM -Name $VMName -Path "D:\Hyper-V" -NewVHDPath "$VMName.vhdx" -NewVHDSizeBytes $StorageSize -MemoryStartupBytes $MemorySize -Generation 2 -ErrorAction Stop
}
# Get and connecte the External Virtual Switch to the VM
$VMSwitch = Get-VMSwitch -Name "External Virtual Switch"
Write-Host "Attaching $($VMSwitch.Name) to $VMName." -ForegroundColor Green
Connect-VMNetworkAdapter -VMName $VM.Name -Name "Network Adapter" -SwitchName $VMSwitch.Name
# Set the processor count to 4 as the lab environment has 8 cores overall
Write-Host "Setting the processor count to 4 for $VMName" -ForegroundColor Green
Set-VMProcessor -VM $VM -Count 4
# Enabled dynamic memory as much of the time the server will not need the full amount
Write-Host "Enabling Dynamic Memory for $VMName" -ForegroundColor Green
Set-VMMemory -VM $VM -DynamicMemoryEnabled $true
# Attach boot ISO
Add-VMDvdDrive -VM $VM -Path "D:\ISOs\WS2022.iso"
Set-VMFirmware -VM $VM -FirstBootDevice (Get-VMDvdDrive -VM $VM)
}
}
$NewServers = @("WS2022-SERVER1", "WS2022-SERVER2", "WS2022-SERVER3")
$NewServers | New-MSSAVM
#Invoke-Command -FilePath .\New-MSSAVM.ps1 -ComputerName OCTOPUS
|
| Invoke-MSSAPostInstall |
|---|
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86 | function Invoke-MSSAPostInstall {
[CmdletBinding()]
param (
[Parameter(Mandatory)]
[string]$HostName,
[Parameter(Mandatory)]
[string]$LocalAdministrator,
[string]$TimeZone = "Eastern Standard Time",
[string]$OSDriveLabel = "OS",
[Parameter(Mandatory)]
[string]$InterfaceAlias,
[Parameter(Mandatory)]
[string]$IPAddress,
[Parameter(Mandatory)]
[string]$DefaultGateway,
[Parameter(Mandatory)]
[string[]]$DNSAddresses
)
# Set the hostname (will require a reboot)
Write-Host "Renaming $($ENV:COMPUTERNAME) to $Hostname"
Rename-Computer -NewName $Hostname
# Create a local administrator (will prompt for password) and disable the existing Administrator account
Write-Host "Creating new local administrator $LocalAdministrator and disabling default Administrator account"
New-LocalUser -Name $LocalAdministrator | Add-LocalGroupMember -Group "Administrators"
Get-LocalUser "Administrator" | Disable-LocalUser
# Enable automatic updates, schedule a day (every day), time (0300) and follow that schedule
Write-Host "Setting up Windows Update"
Set-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" -Name NoAutoUpdate -Value 0
Set-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" -Name ScheduledInstallDay -Value 0
Set-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" -Name ScheduledInstallTime -Value 3
Set-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" -Name AUOptions -Value 4
# Enable remote desktop and require Network Level Authentication (NLA)
Write-Host "Enabling Remote Desktop"
Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server" -Name fDenyTSConnections -Value 0
Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp" -Name UserAuthentication -Value 1
# Set the timezone
Write-Host "Setting timezone to $TimeZone"
Set-TimeZone -Id $TimeZone
# Label and set up disk volumes
Write-Host "Changing C Drive label to $OSDriveLabel"
Set-Volume -DriveLetter C -NewFileSystemLabel $OSDriveLabel
# WARNING: This is highly specific to my set up as I have a second disk I use for storage
#Get-Disk -FriendlyName "Apple*" | New-Partition -UseMaximumSize -DriveLetter D | Format-Volume -FileSystem NTFS -NewFileSystemLabel "STORAGE"
# Download and install Windows Admin Center - Only if you want to administrate via HTTP(s)
# INFO: You generally only need to install this on one server to rule them all
#Start-BitsTransfer -Source "https://go.microsoft.com/fwlink/p/?linkid=2194936" -Destination "C:\Windows\Temp\WindowsAdminCenter.msi"
#msiexec /i C:\Windows\Temp\WindowsAdminCenter.msi /qn /L*v C:\Windows\Temp\WindowsAdminCenter.log SME_PORT=443 SSL_CERTIFICATE_OPTION=generate
# Enable incoming ICMP (ping)
Write-Host "Enabling IPv4 and IPv6 ICMP (Ping)"
New-NetFirewallRule -DisplayName "Networking - Echo Request (ICMPv4-In)" -Direction Inbound -Action Allow -Enabled True -Profile Public -Protocol "ICMPv4" -IcmpType 8 -Group "File and Printer Sharing" | Out-Null
New-NetFirewallRule -DisplayName "Networking - Echo Request (ICMPv6-In)" -Direction Inbound -Action Allow -Enabled True -Profile Public -Protocol "ICMPv6" -IcmpType 128 -Group "File and Printer Sharing" | Out-Null
# Confirm InterfaceIndex/InterfaceAlias to make sure the correct interface adapter is being set
Write-Host "Setting the IP to $IPAddress/24 with a default gateway of $DefaultGateway and DNS of $DNSAddress"
$Interface = Get-NetIPAddress -InterfaceAlias $InterfaceAlias -AddressFamily IPv4
$Interface | New-NetIPAddress -IPAddress $IPAddress -PrefixLength 24 -DefaultGateway $DefaultGateway
$Interface | Set-DnsClientServerAddress -ServerAddresses $DNSAddresses
Write-Host "Rebooting $Hostname"
Restart-Computer -Force
# WIP: Add machien to domain
#Write-Host "Joining $Hostname to the MSSA Domain and restarting."
#Add-Computer -DomainName "mssa.cammarata.me" -NewName $HostName -Credential "mssa\pcammarata" -Restart
}
Invoke-MSSAPostInstall -HostName "WS2022-MEMBER" -LocalAdministrator "pcammarata" -InterfaceAlias "Ethernet" -IPAddress "192.168.42.12" -DefaultGateway "192.168.42.1" -DNSAddresses "192.168.42.11"
#Invoke-Command -FilePath .\Invoke-MSSAPostInstall.ps1 -ComputerName WIN-TBCE4M71PSV -Credential Administrator
|