blocks|key|659839|text|关于存储凭证，我使用了两个函数(通常位于从我的配置文件加载的模块中)：|type|unstyled|depth|inlineStyleRanges|entityRanges|data|659840|#=====================================================================
#+Get-MyCredential
#=====================================================================
function+Get-MyCredential
{
param(
$CredPath,
[switch]$Help
)
$HelpText+=+@"

++++Get-MyCredential
++++Usage:
++++Get-MyCredential+-CredPath+`$CredPath

++++If+a+credential+is+stored+in+$CredPath,+it+will+be+used.
++++If+no+credential+is+found,+Export-Credential+will+start+and+offer+to
++++Store+a+credential+at+the+location+specified.

"@
++++if($Help+-or+(!($CredPath))){write-host+$Helptext;+Break}
++++if+(!(Test-Path+-Path+$CredPath+-PathType+Leaf))+{
++++++++Export-Credential+(Get-Credential)+$CredPath
++++}
++++$cred+=+Import-Clixml+$CredPath
++++$cred.Password+=+$cred.Password+%7C+ConvertTo-SecureString
++++$Credential+=+New-Object+System.Management.Automation.PsCredential($cred.UserName,+$cred.Password)
++++Return+$Credential
}|code-block|syntax|javascript|659841|还有这一条：|659842|#=====================================================================
#+Export-Credential
#+Usage:+Export-Credential+$CredentialObject+$FileToSaveTo
#=====================================================================
function+Export-Credential($cred,+$path)+{
++++++$cred+=+$cred+%7C+Select-Object+*
++++++$cred.password+=+$cred.Password+%7C+ConvertFrom-SecureString
++++++$cred+%7C+Export-Clixml+$path
}|659843|您可以这样使用它：|659844|$Credentials+=+Get-MyCredential+(join-path+($PsScriptRoot)+Syncred.xml)|659845|如果凭证文件不存在，系统会在第一次提示时提示您，此时它会将凭证存储在XML文件中的加密字符串中。第二次运行该行时，xmlfile就在那里，并将自动打开。|659846|entityMap^0|0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|S|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|T|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|U|8|@]|9|@]|A|$]]|$1|I|3|J|5|D|7|V|8|@]|9|@]|A|$E|F]]|$1|K|3|L|5|6|7|W|8|@]|9|@]|A|$]]|$1|M|3|N|5|D|7|X|8|@]|9|@]|A|$E|F]]|$1|O|3|P|5|6|7|Y|8|@]|9|@]|A|$]]|$1|Q|3|-4|5|6|7|Z|8|@]|9|@]|A|$]]]|R|$]]

Regarding storing credentials, I use two functions(that are normally in a module that is loaded from my profile):

<pre><code>#=====================================================================
# Get-MyCredential
#=====================================================================
function Get-MyCredential
{
param(
$CredPath,
[switch]$Help
)
$HelpText = @"

 Get-MyCredential
 Usage:
 Get-MyCredential -CredPath `$CredPath

 If a credential is stored in $CredPath, it will be used.
 If no credential is found, Export-Credential will start and offer to
 Store a credential at the location specified.

"@
 if($Help -or (!($CredPath))){write-host $Helptext; Break}
 if (!(Test-Path -Path $CredPath -PathType Leaf)) {
 Export-Credential (Get-Credential) $CredPath
 }
 $cred = Import-Clixml $CredPath
 $cred.Password = $cred.Password | ConvertTo-SecureString
 $Credential = New-Object System.Management.Automation.PsCredential($cred.UserName, $cred.Password)
 Return $Credential
}
</code></pre>

And this one:

<pre><code>#=====================================================================
# Export-Credential
# Usage: Export-Credential $CredentialObject $FileToSaveTo
#=====================================================================
function Export-Credential($cred, $path) {
 $cred = $cred | Select-Object *
 $cred.password = $cred.Password | ConvertFrom-SecureString
 $cred | Export-Clixml $path
}
</code></pre>

You use it like this:

<pre><code>$Credentials = Get-MyCredential (join-path ($PsScriptRoot) Syncred.xml)
</code></pre>

If the credential file doesnt exist, you will be prompted the first time, at that point it will store the credentials in an encrypted string inside an XML file. The second time you run that line, the xmlfile is there and will be opened automatically.

blocks|key|877042|text|如果您计划重新启动，这里有两种方法可以做到这一点。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|877043|首先，您可以使用具有连接和重启另一台计算机所需权限的凭据在一台计算机上创建任务。这使得调度器负责安全地存储凭证。reboot命令(我是Powershell的一员，但这里更干净。)是：|877044|SHUTDOWN+/r+/f+/m+\\ComputerName|offset|length|style|CODE|877045|在本地计算机上创建计划任务并远程重新启动另一个任务的命令行为：|877046|SCHTASKS+/Create+/TN+"Reboot+Server"+/TR+"shutdown.exe+/r+/f+/m+\\ComputerName"+/SC+ONCE+/ST+00:00+/SD+"12/24/2012"+/RU+"domain\username"+/RP+"password"|877047|我更喜欢第二种方法，在这种方法中，您使用当前凭据创建一个计划任务，该任务使用远程计算机上的系统帐户运行。|877048|SCHTASKS+/Create+/TN+"Reboot+Server"+/TR+"shutdown.exe+/r+/f"+/SC+ONCE+/ST+00:00+/SD+"12/24/2012"+/RU+SYSTEM+/S+ComputerName|877049|这也可以通过GUI实现，只需输入SYSTEM作为用户名，将密码字段留空即可。|877050|entityMap^0|0|0|0|W|0|0|0|48|0|0|0|3G|0|0^^$0|@$1|2|3|4|5|6|7|V|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|W|8|@]|9|@]|A|$]]|$1|D|3|E|5|6|7|X|8|@$F|Y|G|Z|H|I]]|9|@]|A|$]]|$1|J|3|K|5|6|7|10|8|@]|9|@]|A|$]]|$1|L|3|M|5|6|7|11|8|@$F|12|G|13|H|I]]|9|@]|A|$]]|$1|N|3|O|5|6|7|14|8|@]|9|@]|A|$]]|$1|P|3|Q|5|6|7|15|8|@$F|16|G|17|H|I]]|9|@]|A|$]]|$1|R|3|S|5|6|7|18|8|@]|9|@]|A|$]]|$1|T|3|-4|5|6|7|19|8|@]|9|@]|A|$]]]|U|$]]

Here are two ways you could do this, if you are scheduling the reboot.

First you could create a task on one machine using credentials that have rights needed to connect and reboot another machine. This makes the scheduler responsible for securely storing the credentials. The reboot command (I'm a Powershell guy, but this is cleaner.) is:

<code>SHUTDOWN /r /f /m \\ComputerName</code>

The command line to create a scheduled task on the local machine, to remotely reboot another, would be:

<code>SCHTASKS /Create /TN "Reboot Server" /TR "shutdown.exe /r /f /m \\ComputerName" /SC ONCE /ST 00:00 /SD "12/24/2012" /RU "domain\username" /RP "password"</code>

I prefer the second way, where you use your current credentials to create a scheduled task that runs with the system account on a remote machine. 

<code>SCHTASKS /Create /TN "Reboot Server" /TR "shutdown.exe /r /f" /SC ONCE /ST 00:00 /SD "12/24/2012" /RU SYSTEM /S ComputerName</code>

This also works through the GUI, just enter SYSTEM as the user name, leaving the password fields blank.

blocks|key|877088|text|read-host+-assecurestring+%7C+convertfrom-securestring+%7C+out-file+C:\securestring.txt
$pass+=+cat+C:\securestring.txt+%7C+convertto-securestring
$mycred+=+new-object+-typename+System.Management.Automation.PSCredential+-argumentlist+"test",$pass
$mycred.GetNetworkCredential().Password|type|code-block|depth|inlineStyleRanges|entityRanges|data|syntax|javascript|877089|以这种方式存储密码时要非常小心……它不像..。|unstyled|877090|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$B|C]]|$1|D|3|E|5|F|7|J|8|@]|9|@]|A|$]]|$1|G|3|-4|5|F|7|K|8|@]|9|@]|A|$]]]|H|$]]

<pre><code>read-host -assecurestring | convertfrom-securestring | out-file C:\securestring.txt
$pass = cat C:\securestring.txt | convertto-securestring
$mycred = new-object -typename System.Management.Automation.PSCredential -argumentlist "test",$pass
$mycred.GetNetworkCredential().Password
</code></pre>

Be very careful with storing passwords this way... it's not as secure as ...

blocks|key|660010|text|我必须从需要不同凭据的远程服务器运行SCOM+2012函数。我通过将密码解密函数的输出作为输入传递给ConvertTo-SecureString来避免明文密码。为清楚起见，此处未显示此内容。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|660011|我喜欢强类型我的声明。$strPass的类型声明工作正常。|660012|[object]+$objCred+=+$null
[string]+$strUser+=+'domain\userID'
[System.Security.SecureString]+$strPass+=+''+

$strPass+=+ConvertTo-SecureString+-String+"password"+-AsPlainText+-Force
$objCred+=+New-Object+-TypeName+System.Management.Automation.PSCredential+-ArgumentList+($strUser,+$strPass)|code-block|syntax|javascript|660013|entityMap^0|0|0|0^^$0|@$1|2|3|4|5|6|7|K|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|L|8|@]|9|@]|A|$]]|$1|D|3|E|5|F|7|M|8|@]|9|@]|A|$G|H]]|$1|I|3|-4|5|6|7|N|8|@]|9|@]|A|$]]]|J|$]]

I have to run SCOM 2012 functions from a remote server that requires a different credential. I avoid clear-text passwords by passing the output of a password decryption function as input to ConvertTo-SecureString. For clarity, this is not shown here.

I like to strongly type my declarations. The type declaration for $strPass works correctly.

<pre><code>[object] $objCred = $null
[string] $strUser = 'domain\userID'
[System.Security.SecureString] $strPass = '' 

$strPass = ConvertTo-SecureString -String "password" -AsPlainText -Force
$objCred = New-Object -TypeName System.Management.Automation.PSCredential -ArgumentList ($strUser, $strPass)
</code></pre>

blocks|key|877170|text|你为什么不尝试一些非常简单的东西呢？|type|unstyled|depth|inlineStyleRanges|entityRanges|data|877171|使用带命令'shutdown+/r+/f+/t+0‘的psexec和CMD中的PC列表。|877172|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|F|8|@]|9|@]|A|$]]|$1|B|3|C|5|6|7|G|8|@]|9|@]|A|$]]|$1|D|3|-4|5|6|7|H|8|@]|9|@]|A|$]]]|E|$]]

why dont you try something very simple? 

use psexec with command 'shutdown /r /f /t 0' and a PC list from CMD.

blocks|key|660076|text|在这种情况下，下面的代码可能会对某人有所帮助。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|660077|function+Get-RemoteConnection()
{
++++//$serverIp+can+be+passed+as+a+parameter+of+the+function.
++++//I+just+make+it+static+for+testing.+
++++$serverIp+=+'192.168.100.137'
++++Enable-PSRemoting+-Force
++++Set-Item+wsman:\localhost\client\trustedhosts+$serverIp
++++Restart-Service+WinRM
++++#Set+credentials+needed+for+remote+installation
++++$userName+=+"administrator"
++++$password+=+ConvertTo-SecureString+"2020core0515"+-AsPlainText+-Force
++++$cred+=+New-Object+System.Management.Automation.PSCredential+-ArgumentList+($userName,+$password)
++++$session+=+New-PSSession+-ComputerName+$serverIp+-Credential+$cred

++++$a+=+Invoke-Command+-Session+$session+-ScriptBlock+{++Get-WmiObject+Win32_LogicalDisk+-Filter+"DriveType=3"+%7C+Select-Object+DeviceID,+@{label='UsedPercent';+expression={[Math]::Round((($_.size+-+$_.freespace)+/+$_.size)+*+100,+2)}}+}

++++Write-Host+$a

++++return+$session
}

function+Delete-RemoteConnection($session)
{
++++Disconnect-PSSession+$session+%7C+Out-Null
++++Disable-WSManCredSSP+-Role+Client
}|code-block|syntax|javascript|660078|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

In case below code might help someone.
<pre><code>function Get-RemoteConnection()
{
 //$serverIp can be passed as a parameter of the function.
 //I just make it static for testing. 
 $serverIp = '192.168.100.137'
 Enable-PSRemoting -Force
 Set-Item wsman:\localhost\client\trustedhosts $serverIp
 Restart-Service WinRM
 #Set credentials needed for remote installation
 $userName = &quot;administrator&quot;
 $password = ConvertTo-SecureString &quot;2020core0515&quot; -AsPlainText -Force
 $cred = New-Object System.Management.Automation.PSCredential -ArgumentList ($userName, $password)
 $session = New-PSSession -ComputerName $serverIp -Credential $cred

 $a = Invoke-Command -Session $session -ScriptBlock { Get-WmiObject Win32_LogicalDisk -Filter &quot;DriveType=3&quot; | Select-Object DeviceID, @{label='UsedPercent'; expression={[Math]::Round((($_.size - $_.freespace) / $_.size) * 100, 2)}} }

 Write-Host $a

 return $session
}

function Delete-RemoteConnection($session)
{
 Disconnect-PSSession $session | Out-Null
 Disable-WSManCredSSP -Role Client
}
</code></pre>

blocks|key|877249|text|这就是我使用的，对我来说也是有效的。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|877250|$User="Domain\Username"
$Password=[Text.Encoding]::Unicode.GetString([Convert]::FromBase64String('VABlAHMAdABQAGEAcwBzAHcAbwByAGQA'))

$SecurePassword+=+New-Object+-TypeName+System.Security.SecureString
$Password.ToCharArray()+%7C+ForEach-Object+{$SecurePassword.AppendChar($_)}

$Credentials+=+New-Object+-TypeName+System.Management.Automation.PSCredential+-ArgumentList+$User,+$SecurePassword|code-block|syntax|javascript|877251|为了获得VABlAHMAdABQAGEAcwBzAHcAbwByAGQA，我这样做：|877252|Encode+$EString表示加密的字符串，$DString表示解密的字符串|877253|$EString+=+Read-Host+"Type+Text+to+Encode"+-AsSecureString
$BSTR=[System.Runtime.InteropServices.Marshal]::SecureStringToBSTR($EString)
$DString=[System.Runtime.InteropServices.Marshal]::PtrToStringAuto($BSTR)
$Encoded=[Convert]::ToBase64String([System.Text.Encoding]::Unicode.GetBytes($DString))

$Encoded+#+VABlAHMAdABQAGEAcwBzAHcAbwByAGQA
$DString+#+TestPassword|877254|这样我就可以在脚本上输入任何我想要的密码，而不会有太多的麻烦。|877255|entityMap^0|0|0|0|0|0|0^^$0|@$1|2|3|4|5|6|7|Q|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|R|8|@]|9|@]|A|$E|F]]|$1|G|3|H|5|6|7|S|8|@]|9|@]|A|$]]|$1|I|3|J|5|6|7|T|8|@]|9|@]|A|$]]|$1|K|3|L|5|D|7|U|8|@]|9|@]|A|$E|F]]|$1|M|3|N|5|6|7|V|8|@]|9|@]|A|$]]|$1|O|3|-4|5|6|7|W|8|@]|9|@]|A|$]]]|P|$]]

This is what I use and works for me.
<pre><code>$User=&quot;Domain\Username&quot;
$Password=[Text.Encoding]::Unicode.GetString([Convert]::FromBase64String('VABlAHMAdABQAGEAcwBzAHcAbwByAGQA'))

$SecurePassword = New-Object -TypeName System.Security.SecureString
$Password.ToCharArray() | ForEach-Object {$SecurePassword.AppendChar($_)}

$Credentials = New-Object -TypeName System.Management.Automation.PSCredential -ArgumentList $User, $SecurePassword
</code></pre>
And to get VABlAHMAdABQAGEAcwBzAHcAbwByAGQA I do this:
<h1>To Encode $EString means Encrypted String and $DString means Decrypted String</h1>
<pre><code>$EString = Read-Host &quot;Type Text to Encode&quot; -AsSecureString
$BSTR=[System.Runtime.InteropServices.Marshal]::SecureStringToBSTR($EString)
$DString=[System.Runtime.InteropServices.Marshal]::PtrToStringAuto($BSTR)
$Encoded=[Convert]::ToBase64String([System.Text.Encoding]::Unicode.GetBytes($DString))

$Encoded # VABlAHMAdABQAGEAcwBzAHcAbwByAGQA
$DString # TestPassword
</code></pre>
That way I can put any password I want on the script without too much hassle.

blocks|key|660218|text|您可以将加密密码存储在凭据保管库中，而不是将其存储在文本文件中。在下面的示例中，仅在第一次提示用户输入密码时，才会提示用户输入密码，之后将从凭证保险库检索密码。|type|unstyled|depth|inlineStyleRanges|entityRanges|data|660219|#+Load+the+Windows+Runtime+Class
[Windows.Security.Credentials.PasswordVault,Windows.Security.Credentials,ContentType=WindowsRuntime]
$Vault+=+New-Object+Windows.Security.Credentials.PasswordVault

$RESOURCE+=+"myresource"
$USERNAME+=+"myuser"

try+{
++++$credentials+=+$Vault.Retrieve($RESOURCE,$USERNAME)
++++$pwd+=+$credentials.Password+%7C+ConvertTo-SecureString+-Key+(1..16)
++++}
catch+{
++++$pwd+=+Read-Host+"please+enter+your+password:"+-AsSecureString
++++$Encrypted+=+ConvertFrom-SecureString+-SecureString+$pwd+-Key+(1..16)
++++$credentials+=+new-object+-Type+Windows.Security.Credentials.PasswordCredential+-ArgumentList+$RESOURCE,$USERNAME,$Encrypted
++++$Vault.Add($credentials)
++++}

$cred+=+New-Object+System.Management.Automation.PsCredential($USERNAME,$pwd)|code-block|syntax|javascript|660220|entityMap^0|0|0^^$0|@$1|2|3|4|5|6|7|I|8|@]|9|@]|A|$]]|$1|B|3|C|5|D|7|J|8|@]|9|@]|A|$E|F]]|$1|G|3|-4|5|6|7|K|8|@]|9|@]|A|$]]]|H|$]]

Instead of storing the encrypted password in a text file you can store it in the credential vault.
In the follwing example the user is prompted for a password only the first time, after that the password is retrieved from the credential vault.
<pre><code># Load the Windows Runtime Class
[Windows.Security.Credentials.PasswordVault,Windows.Security.Credentials,ContentType=WindowsRuntime]
$Vault = New-Object Windows.Security.Credentials.PasswordVault

$RESOURCE = &quot;myresource&quot;
$USERNAME = &quot;myuser&quot;

try {
 $credentials = $Vault.Retrieve($RESOURCE,$USERNAME)
 $pwd = $credentials.Password | ConvertTo-SecureString -Key (1..16)
 }
catch {
 $pwd = Read-Host &quot;please enter your password:&quot; -AsSecureString
 $Encrypted = ConvertFrom-SecureString -SecureString $pwd -Key (1..16)
 $credentials = new-object -Type Windows.Security.Credentials.PasswordCredential -ArgumentList $RESOURCE,$USERNAME,$Encrypted
 $Vault.Add($credentials)
 }

$cred = New-Object System.Management.Automation.PsCredential($USERNAME,$pwd)
</code></pre>

I'd like to restart a remote computer that belongs to a domain. I have an administrator account but I don't know how to use it from powershell.

I know that there is a <code>Restart-Computer</code> cmdlet and that I can pass credential but if my domain is for instance <code>mydomain</code>, my username is <code>myuser</code> and my password is <code>mypassword</code> what's the right syntax to use it? 

I need to schedule the reboot so I don't have to type the password.

Using PowerShell credentials without being prompted for a password

我想重新启动属于某个域的远程计算机。我有一个管理员帐户，但我不知道如何在powershell中使用它。我知道有一个Restart-Computer cmdlet，我可以传递凭据，但是如果我的域是例如mydomain，我的用户名是myuser，我的密码是mypassword，使用它的正确语法是什么？我需要安排重新启动，这...

问在不提示输入密码的情况下使用PowerShell凭证
EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问在不提示输入密码的情况下使用PowerShell凭证EN

社区

活动

资源

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问在不提示输入密码的情况下使用PowerShell凭证
EN