Administração
e PowerShell

# Ativar PowerShell Remoting no servidor
Enable-PSRemoting -Force

# Abrir sessão interativa num servidor remoto
Enter-PSSession -ComputerName "DC-LAB01" `
                -Credential (Get-Credential "EMPRESA\Administrator")

# Executar comando numa máquina remota (sem sessão interativa)
Invoke-Command -ComputerName "DC-LAB01" `
               -Credential (Get-Credential) `
               -ScriptBlock { Get-Service | Where-Object Status -eq "Running" }

# Executar script num conjunto de servidores
$servidores = "DC-LAB01", "SRV-FILE01", "SRV-WEB01"
Invoke-Command -ComputerName $servidores -ScriptBlock {
    [PSCustomObject]@{
        Servidor = $env:COMPUTERNAME
        RAM_Livre = (Get-CimInstance Win32_OperatingSystem).FreePhysicalMemory
        CPU_Uso  = (Get-CimInstance Win32_Processor).LoadPercentage
    }
}

# Ver últimos 20 erros no log System
Get-EventLog -LogName System -EntryType Error -Newest 20

# Ver tentativas de login falhadas (Event ID 4625) — log Security
Get-WinEvent -FilterHashtable @{
    LogName = 'Security'
    Id      = 4625  # Failed logon
    StartTime = (Get-Date).AddHours(-24)  # últimas 24 horas
} | Select-Object TimeCreated, Message | Format-Table -Wrap

# Ver reinícios do sistema nas últimas 48h
Get-WinEvent -FilterHashtable @{
    LogName   = 'System'
    Id        = 1074  # System shutdown/restart
    StartTime = (Get-Date).AddHours(-48)
}

# Exportar log para CSV para análise
Get-EventLog -LogName Application -Newest 100 `
             | Export-Csv "C:\Logs\app-eventos.csv" -NoTypeInformation

# Script de relatório de saúde do servidor
function Get-ServidorSaude {
    param([string]$Servidor = $env:COMPUTERNAME)

    $os  = Get-CimInstance Win32_OperatingSystem -ComputerName $Servidor
    $cpu = Get-CimInstance Win32_Processor -ComputerName $Servidor
    $disco = Get-CimInstance Win32_LogicalDisk -ComputerName $Servidor `
             -Filter "DriveType=3"

    [PSCustomObject]@{
        Servidor     = $Servidor
        SO           = $os.Caption
        Uptime_Dias  = [math]::Round(($os.LocalDateTime - $os.LastBootUpTime).TotalDays, 1)
        RAM_Total_GB = [math]::Round($os.TotalVisibleMemorySize / 1MB, 1)
        RAM_Livre_GB = [math]::Round($os.FreePhysicalMemory / 1MB, 1)
        CPU_Uso_Pct  = $cpu.LoadPercentage
        Disco_C_GB   = [math]::Round($disco.Size / 1GB, 1)
        Disco_C_Livre= [math]::Round($disco.FreeSpace / 1GB, 1)
    }
}

# Usar a função
Get-ServidorSaude -Servidor "DC-LAB01" | Format-List

# Formato do CSV: Nome,Apelido,Username,OU
# Ex: João,Silva,joao.silva,OU=Professores,OU=Escola,DC=escola,DC=local

$usuarios = Import-Csv "C:\Scripts\utilizadores.csv"

foreach ($u in $usuarios) {
    try {
        New-ADUser `
            -GivenName         $u.Nome `
            -Surname           $u.Apelido `
            -Name              "$($u.Nome) $($u.Apelido)" `
            -SamAccountName    $u.Username `
            -UserPrincipalName "$($u.Username)@escola.local" `
            -Path              $u.OU `
            -AccountPassword   (ConvertTo-SecureString "Temp@2024!" -AsPlainText -Force) `
            -ChangePasswordAtLogon $true `
            -Enabled           $true
        Write-Host "✓ Criado: $($u.Username)" -ForegroundColor Green
    }
    catch {
        Write-Host "✗ Erro em $($u.Username): $_" -ForegroundColor Red
    }
}

# Instalar feature de backup
Install-WindowsFeature -Name Windows-Server-Backup

# Criar backup manual do estado do sistema (System State)
# Inclui AD, registo, ficheiros de arranque — essencial para recuperar DC
wbadmin start systemstatebackup -backupTarget:D: -quiet

# Agendar backup diário (usando Task Scheduler via PS)
$action  = New-ScheduledTaskAction -Execute "wbadmin" `
           -Argument "start systemstatebackup -backupTarget:D: -quiet"
$trigger = New-ScheduledTaskTrigger -Daily -At "02:00"
Register-ScheduledTask -TaskName "BackupDiario" `
                       -Action $action -Trigger $trigger `
                       -RunLevel Highest -Force

# Ver status do último backup
wbadmin get status

# Ver processos que mais consomem CPU (top 10)
Get-Process | Sort-Object CPU -Descending | Select-Object -First 10 `
            | Format-Table Name, CPU, WorkingSet -AutoSize

# Monitorizar uso de disco em todos os volumes
Get-PSDrive -PSProvider FileSystem | Select-Object `
    Name,
    @{N="Total_GB";  E={[math]::Round(($_.Used + $_.Free) / 1GB, 1)}},
    @{N="Livre_GB";  E={[math]::Round($_.Free / 1GB, 1)}},
    @{N="Usado_Pct"; E={[math]::Round($_.Used / ($_.Used + $_.Free) * 100, 1)}}

# Ver serviços parados que deveriam estar a correr
Get-Service | Where-Object { $_.Status -ne "Running" -and $_.StartType -eq "Automatic" }

# Reiniciar um serviço específico
Restart-Service -Name "DNS" -Force
Restart-Service -Name "DHCP" -Force

# Script de alerta: envia aviso se disco C tiver menos de 10% livre
$disco = Get-PSDrive C
$livPct = [math]::Round($disco.Free / ($disco.Used + $disco.Free) * 100, 1)
if ($livPct -lt 10) {
    Write-Warning "⚠️ Disco C: apenas $livPct% livre! Intervenção necessária."
    # Aqui podias enviar email ou criar evento no Event Viewer
}