Key Facts
- Remoting enables execution on remote servers without SSH or agents
- WMI and CIM cmdlets access low-level Windows operations
- Event log monitoring detects security issues in real-time
- Services automation improves uptime and reduces manual intervention
Service Management at Scale
Manage services across multiple servers efficiently:
# Restart a service on multiple servers
$servers = @("Server01", "Server02", "Server03")
foreach ($server in $servers) {
Restart-Service -Name "Spooler" -ComputerName $server -Force
Get-Service -Name "Spooler" -ComputerName $server
}Monitor System Performance
Track CPU, memory, and disk usage programmatically:
# Get disk space usage
Get-Volume | Select-Object DriveLetter, Size, SizeRemaining, @{
Name = "PercentUsed"
Expression = {[math]::Round((($_.Size - $_.SizeRemaining) / $_.Size) * 100, 2)}
}Event Log Monitoring
Alert on critical security events:
# Get failed login attempts in last hour
$oneHourAgo = (Get-Date).AddHours(-1)
Get-EventLog -LogName Security -InstanceId 4625 -After $oneHourAgo |
Select-Object TimeGenerated, Message | Head -20