When you run Invoke-WebRequest or Invoke-RestMethod command, sometimes you get the error “The underlying connection was closed: Could not establish trust relationship for the SSL/TLS secure channel.” because there could be a certificate issue or the required windows version doesn’t support the TLS or SSL version. You can use the below command to bypass this error.[System.Net.ServicePointManager]::ServerCertificateValidationCallback = {$true}Or you can use the below code to resolve this error.Exampleadd-type @"    using System.Net;    using System.Security.Cryptography.X509Certificates;    public class TrustAllCertsPolicy : ICertificatePolicy {       public bool CheckValidationResult(       ServicePoint srvPoint, X509Certificate certificate,       WebRequest request, ... Read More

To disable the Azure VM accelerated settings using PowerShell, we need to disable the EnableAcceleratedNetworking property on the NIC attached to the VM.$vm = Get-AzVM -Name TestVM $nicname = (($vm.NetworkProfile.NetworkInterfaces.id).Split('/'))[-1] $nicsetting = Get-AzNetworkInterface -ResourceGroupName $vm.ResourceGroupName - Name $nicname $nicsetting.EnableAcceleratedNetworking = $falseIn the above example, we are setting AN settings on the Azure VM “TestVM”. To set the AN setting on the particular subscription, use the below command. Make sure that you are connected to the proper subscription using the Set-AzContext command.Get-AzVM | Select Name, ResourceGroupName, `    @{N='Accelerated Netoworking'; E={       $nic = (($_.NetworkProfile.NetworkInterfaces.id).Split('/'))[-1]       $nicsetting = ... Read More

To enable the Azure VM accelerated settings using PowerShell, we need to enable the EnableAcceleratedNetworking property on the NIC attached to the VM.$vm = Get-AzVM -Name TestVM $nicname = (($vm.NetworkProfile.NetworkInterfaces.id).Split('/'))[-1] $nicsetting = Get-AzNetworkInterface -ResourceGroupName $vm.ResourceGroupName - Name $nicname $nicsetting.EnableAcceleratedNetworking = $trueIn the above example, we are setting AN settings on the Azure VM “TestVM”. To set the AN setting on the particular subscription, use the below command. Make sure that you are connected to the proper subscription using the Set-AzContext command.Get-AzVM | Select Name, ResourceGroupName, `    @{N='Accelerated Netoworking'; E={       $nic = (($_.NetworkProfile.NetworkInterfaces.id).Split('/'))[-1]       $nicsetting ... Read More

From the Azure Portal, we can find the Accelerated Networking (AN) status from the networking blade.To get the AN settings on the VM, we need to first retrieve the NIC information because it is set on it. We have the VM named ‘TestVM’ and we will retrieve its NIC information.PS C:\> $vm = Get-AzVM -Name TestVMTo get the NIC associated with the VM, $nicname = (($vm.NetworkProfile.NetworkInterfaces.id).Split('/'))[-1]We need to retrieve the NIC settings to get the AN setting.$nicsetting = Get-AzNetworkInterface -ResourceGroupName $vm.ResourceGroupName - Name $nicnameTo get the AN settings, use the EnableAcceleratedNetworking property.$nicsetting.EnableAcceleratedNetworkingIf you want to retrieve the AN settings on ... Read More

Basic authentication is the insecure authentication for windows. Before enabling it make sure you comply with your organization policies. To enable the basic authentication for the windows servers using PowerShell, we can use the below command.PS C:\> Set-Item -Path "WSMan:\localhost\Service\Auth\Basic" -Value $true -VerboseTo enable the basic authentication for the remote windows servers using PowerShell, use the below command.Invoke-Command -ComputerName TestMahchine1, TestMachine2 - ScriptBlock {    Set-Item -Path "WSMan:\localhost\Service\Auth\Basic" -Value    $true -Verbose }

Basic authentication is the insecure authentication for the windows. To disable the basic authentication on the windows server using PowerShell,PS C:\> Set-Item -Path "WSMan:\localhost\Service\Auth\Basic" -Value $false -VerboseTo disable the basic authentication on the remote windows servers using PowerShell, use the below command,Invoke-Command -ComputerName TestMahchine1, TestMachine2 - ScriptBlock {    Set-Item -Path "WSMan:\localhost\Service\Auth\Basic" -Value    $false -Verbose }

To disable the credssp on the local computer using PowerShell, use the below command.PS C:\> Disable-WSManCredSSP -Role Server -VerboseYou can check if the credssp is disabled, using the below command.PS C:\> Get-ChildItem WSMan:\localhost\Service\Auth | Where-Object {$_.Name    -eq"CredSSP"} | Select Name, Value Name    Value ----    ----- CredSSP falseTo disable the credssp authentication on the remote computers using PowerShell,Invoke-Command -ComputerName TestMahchine1, TestMachine2 - ScriptBlock {    Disable-WSManCredSSP -Role Server }

Before enabling the credssp authentication for the windows server, we will first check the credssp status using the below command.Get-ChildItem WSMan:\localhost\Service\Auth | Where-Object {$_.Name -eq "CredSSP"}    | Select Name, ValueOutputName    Value ----    ----- CredSSP falseTo enable the credssp,PS C:\> Enable-WSManCredSSP -role server -ForceOutputcfg             : http://schemas.microsoft.com/wbem/wsman/1/config/service/auth lang             : en-US Basic             : false Kerberos          : true Negotiate         : true Certificate       : false CredSSP           : true CbtHardeningLevel : RelaxedTo enable the credssp authentication on the remote computers,Invoke-Command -ComputerName TestMahchine1, TestMachine2 - ScriptBlock {    Enable-WSManCredSSP -Role Server -Force }

To get the windows server authentication setting using PowerShell, we can use the below command on the local server.PS C:\> Get-ChildItem WSMan:\localhost\Service\Auth | Select name, valueOutputName              Value ----              ----- Basic             false Kerberos          true Negotiate         true Certificate       false CredSSP           false CbtHardeningLevel RelaxedTo get the same settings on the remote servers, use the below command.Invoke-Command -ComputerName TestMahchine1, TestMachine2 - ScriptBlock {    Get-ChildItem WSMan:\localhost\Service\Auth } | Select PSComputerName, Name, Auth

To get the Azure VM activity logs with PowerShell, we need to use the Get-AzLog command. Before running, AZ commands make sure that you are connected to the Azure Account using (ConnectAzAccount) and the subscription (Set-AzContext).We have the below TestVM, we need to retrieve activity logs and we need its resource id. We will get the resource ID using, PS C:\> $vm = Get-AzVM -VMName TestVMPS C:\> $vm.IdWe need to use this ID in the Get-AzLog command to retrieve the activity logs.PS C:\> Get-AzLog -ResourceId $vm.IdIt will provide all the azure events for that specific resource group and you can ... Read More