{"id":347,"date":"2017-07-24T10:11:45","date_gmt":"2017-07-24T08:11:45","guid":{"rendered":"https:\/\/msb365.abstergo.ch\/?p=347"},"modified":"2017-10-27T10:14:08","modified_gmt":"2017-10-27T08:14:08","slug":"web-application-proxy-powershell-cheat-sheet","status":"publish","type":"post","link":"https:\/\/www.msb365.blog\/?p=347","title":{"rendered":"Web Application Proxy PowerShell Cheat Sheet"},"content":{"rendered":"
\n
\n
\n
\n
\n
\n

As Web Application Proxy is a standard Windows Server role service, you can use many Windows Server PowerShell tools to control Web Application Proxy:<\/p>\n\n\n\n\n\n\n\n\n\n
Shows Web Application Proxy Windows services status<\/td>\nGet-Service’appproxysvc’,’appproxyctrl’,’adfssrv’|fl-property*<\/td>\n<\/tr>\n
Shows the configuration of Web Application Proxy Windows service<\/td>\nGet-WmiObject-ClassWin32_Service-PropertyStartMode-Filter”Name=’appproxysvc'”<\/td>\n<\/tr>\n
Get Best Practices Analyzer (BPA) results for the Remote Access role<\/td>\nInvoke-BpaModel Microsoft\/Windows\/RemoteAccessServer ;
\nGet-BpaResultMicrosoft\/Windows\/RemoteAccessServer<\/td>\n<\/tr>\n
List\u00a0all the events that Web Application Proxy had in the last 24 hours with their ID, Level and Message.<\/td>\n$yesterday = (Get-Date) – (New-TimeSpan -Day 1) ;
\nGet-WinEvent-FilterHashTable @{LogName=’Microsoft-Windows-WebApplicationProxy\/Admin’; StartTime=$yesterday} |group-PropertyID,LevelDisplayName,Message-NoElement|sortCount,Name-Descending|ft-AutoSize<\/td>\n<\/tr>\n
Read\u00a0Web Application Proxy\u00a0registry keys<\/td>\nGet-ItemPropertyhklm:\\software\\microsoft\\appproxy<\/td>\n<\/tr>\n
Read\u00a0Web Application Proxy performance counters at current point<\/td>\nGet-Counter’\\Web Application Proxy\\*’<\/td>\n<\/tr>\n
Return the number of currently active requests<\/td>\n(Get-Counter ‘\\Web Application Proxy\\active requests’).CounterSamples.CookedValue<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

 <\/p>\n<\/div>\n<\/article>\n

\n
\n
\n
\n
\n
\n\n\n\n\n\n\n\n\n\n\n\n
cmdlet<\/b><\/td>\nalias<\/b><\/td>\n<\/tr>\n
Add-WebApplicationProxyApplication<\/td>\nawpa<\/td>\n<\/tr>\n
Get-WebApplicationProxyApplication<\/td>\ngwpa<\/td>\n<\/tr>\n
Set-WebApplicationProxyApplication<\/td>\nswpa<\/td>\n<\/tr>\n
Remove-WebApplicationProxyApplication<\/td>\nrwpa<\/td>\n<\/tr>\n
Get-WebApplicationProxyConfiguration<\/td>\ngwpc<\/td>\n<\/tr>\n
Set-WebApplicationProxyConfiguration<\/td>\nswpc<\/td>\n<\/tr>\n
Get-WebApplicationProxyAvailableADFSRelyingParty<\/td>\ngwpr<\/td>\n<\/tr>\n
Get-WebApplicationProxyHealth<\/td>\ngwph<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

 <\/p>\n<\/div>\n

\n
\n
\n
\n
\n
\n\n\n\n\n\n\n\n\n\n
Show\u00a0published applications\u00a0that have ADFS as their preauthentication method<\/td>\nGet-WebApplicationProxyApplication | ? {$_.ExternalPreauthentication -eq ‘ADFS’}<\/td>\n<\/tr>\n
Export all published applications to a file<\/td>\nGet-WebApplicationProxyApplication | Export-Clixml “ExportedApps”<\/td>\n<\/tr>\n
Import published applications\u00a0from a file<\/td>\nImport-Clixml “ExportedApps” | Add-WebApplicationProxyApplication<\/td>\n<\/tr>\n
Getting full help on the set command<\/td>\nGet-Help -Full Set-WebApplicationProxyApplication<\/td>\n<\/tr>\n
List all the details on all the certificates that are used by published apps.
\nNote: the cert: provider does not support filter<\/td>\n		$WAP_Certs = (gwpa).ExternalCertificateThumbprint | sort \u2013Unique\u00a0;
\ndir Cert:\\LocalMachine\\my |? {$WAP_Certs -contains $_.Thumbprint} | fl -Property *<\/td>\n<\/tr>\n
Add a machine to the Web Application Proxy connected servers list<\/td>\nswpc -ConnectedServersName ((gwpc).ConnectedServersName + \u2018ServerToAdd\u2019)<\/td>\n<\/tr>\n
Remove a machine from the\u00a0Web Application Proxy connected servers list<\/td>\nswpc \u2013ConnectedServersName ((gwpc).ConnectedServersName -ne \u2018ServerToRemove\u2019)<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

 <\/p>\n

\n
\n
\n
\n
\n
\n

And finally, here are some tricks for managing Web Application Proxy multi-machine deployments:<\/p>\n

 <\/p>\n

 <\/p>\n\n\n\n\n\n\n
Show the status of Web Application Proxy related services on all the connected servers grouped by their status.
\nNote: Same syntax would work with any command that supports the ComputerName parameter. E.g. set-service, get-process<\/td>\n		Get-Service’appproxysvc’,’appproxyctrl’,’adfssrv’-ComputerName ((gwpc).ConnectedServersName) |sortStatus,MachineName,Name|ftMachineName,Name-AutoSize-GroupByStatus<\/td>\n<\/tr>\n
Restart the Web Application Proxy service on all the connected servers and print the name of the machines<\/td>\nInvoke-Command -ScriptBlock {Restart-Service ‘appproxysvc’; (Get-WmiObject -Class Win32_ComputerSystem).Name} -ComputerName ((gwpc).ConnectedServersName)<\/td>\n<\/tr>\n
Show the names of all the\u00a0connected servers that had event 12000 in the last 10 hours<\/td>\nForeach ($Server in (gwpc).ConnectedServersName){Get-WinEvent -FilterHashTable @{LogName=’Microsoft-Windows-WebApplicationProxy\/Admin’; ID=12000; StartTime=(Get-Date) – (New-TimeSpan -hour 10)} -ComputerName $Server -ErrorAction SilentlyContinue | group MachineName -NoElement | ft Name -HideTableHeaders }<\/td>\n<\/tr>\n
Show all IP addresses of all servers in the cluster.
\nNote:
\n1. This will work only if remote management is enabled on all servers using Kerberos
\n2. Same syntax would work with any command that supports the CimSession parameter
\n3. New-CimSession can accept admin credentials.<\/td>\n		Get-NetIPAddress-CimSession (New-CimSession-ComputerName ((gwpc).ConnectedServersName)) |ftIPAddress<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

 <\/p>\n<\/div>\n<\/article>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/article>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/article>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

As Web Application Proxy is a standard Windows Server role service, you can use many Windows Server PowerShell tools to control Web Application Proxy: Shows Web Application Proxy Windows services status Get-Service’appproxysvc’,’appproxyctrl’,’adfssrv’|fl-property* Shows the configuration of Web Application Proxy Windows service Get-WmiObject-ClassWin32_Service-PropertyStartMode-Filter”Name=’appproxysvc’” Get Best Practices Analyzer (BPA) results for the Remote Access role Invoke-BpaModel Microsoft\/Windows\/RemoteAccessServer […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_crdt_document":"","om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[4,3],"tags":[],"class_list":["post-347","post","type-post","status-publish","format-standard","hentry","category-adfs","category-powershell"],"post_mailing_queue_ids":[],"_links":{"self":[{"href":"https:\/\/www.msb365.blog\/index.php?rest_route=\/wp\/v2\/posts\/347","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.msb365.blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.msb365.blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.msb365.blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.msb365.blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=347"}],"version-history":[{"count":4,"href":"https:\/\/www.msb365.blog\/index.php?rest_route=\/wp\/v2\/posts\/347\/revisions"}],"predecessor-version":[{"id":351,"href":"https:\/\/www.msb365.blog\/index.php?rest_route=\/wp\/v2\/posts\/347\/revisions\/351"}],"wp:attachment":[{"href":"https:\/\/www.msb365.blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=347"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.msb365.blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=347"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.msb365.blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=347"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}