List TSE/RDS Mapping Config

Du to a prod incident, we had to check all the TSE/RDS mapping config on our farm.
Of course, there is no way to do it manually on 200 servers …

How can we do it with Powershell ?

First, we need to find which are registry keys that are actualy storing RDS params. Google is our friend! We find all the required informations here. Those keys seem interesting :

fDisableEncryption
fDisableCpm
fDisableCdm
fDisableCcm
fDisableLPT
fDisableClip
fDisableExe
fDisableCam

We already howto to interrogate remote registry here and there

Put it all together

$TSEKey="SYSTEM\ControlSet001\Control\Terminal Server\WinStations\RDP-Tcp" get-XAserver | %{ $reg=[microsoft.win32.registrykey]::OpenRemoteBaseKey('LocalMachine',$_.ServerName) $copy = $_ $reg.OpenSubKey($TSEKey).getValueNames() |? { $_ -like 'fDisable*'} |% { $copy | Add-member -Type NoteProperty -Name $_ -Value $reg.OpenSubKey($TSEKey).getValue($_) } $copy } | select ServerName, fDisable*

How can we do it with Powershell ?

Put it all together

Leave a Reply Cancel reply