syntax error

Question

Hi All

i am using the below syntax. i am connected to server01 and trying to execute the below syntax.
i.e i am connected to server01 and remoting it to server02 and executing.
when i directly run on server02 i dont see any issue but facing issue with remoting. i have also installed dns module on server01
I am using Account01 and when prompted for credentials i am giving it.
i am getting error Failed to get the zone information for mydomain.com mydc01

Answer 1

I think you'll find that you're encountering the "Second Hop" problem. You can't use the credentials passed from local machine to SERVER02 when your Get-DnsServerResourceRecord tries to connect to MYDC01. The cmdlet uses WMI/CIM and it's probably being denied permission. The reason, I'm guessing, is probably an error "5" or "1722".

# create session from local machine (machine #1) to SERVER02 (machine #2)
$session = New-PSSession -ComputerName server02 -Credential Account01
# Run Invoke-Command on SERVER02 (machine #2)
Invoke-Command -Session $session -ScriptBlock {
    try {
        Write-Host $env:COMPUTERNAME;
        # Try connecting to MYDC01 (machine #3) from Server02 (machine #2)
        $dnsrecords = Get-DnsServerResourceRecord -ZoneName mydomain.com -ComputerName mydc01 -ErrorAction Stop | 
            Where-Object { $_.RecordType -eq "A" -Or $_.RecordType -eq "CNAME" } | 
                ConvertTo-Json
        Write-Host $dnsrecords
        # Note: $dnsrecords never returned to SERVER02!
    }
    catch {
        $_  # return $Error[0] to Server02
    }
}
# remove session with SERVER02 (machine #2)
Remove-PSSession -session $session

Answer 2

Syntax errors are mistakes in the source code, such as spelling and punctuation errors, incorrect labels, and so on, which cause an error message to be generated by the compiler. These appear in a separate error window, with the error type and line number indicated so that it can be corrected in the edit window.If a syntax error appears, check to make sure that the parentheses are matched up correctly. If one end is missing or lined up incorrectly, then type in the correction and check to make sure that the code can be compiled. Keeping the code as organized as possible also helps.

Regards,
Rachel Gomez

Answer 3

Hi @Glenn Maxwell , did you see the follow up from Rich? Try using Invoke-Command mydc01 -credential (Get-Credential) -ScriptBlock .

Answer 4

i am using domain admin account but still i am getting the below error

$session = New-PSSession -ComputerName server02 -Credential account1
Invoke-Command -Session $session -ScriptBlock {
try {
Write-Host $env:COMPUTERNAME;
$dnsrecords = Get-DnsServerResourceRecord -ZoneName mydomain.com -ComputerName mydc01 -ErrorAction Stop | Where-Object { $.RecordType -eq "A" -Or $.RecordType -eq "CNAME" } | ConvertTo-Json
Write-Host $dnsrecords
}
catch {
$_
}
}
Remove-PSSession -session $session
server02
Get-DnsServerResourceRecord : Failed to get the zone information for mydomain.com on server mydc01.
At line:4 char:15

• ... nsrecords = Get-DnsServerResourceRecord -ZoneName mydomain.com ...
• ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
• CategoryInfo : PermissionDenied: (mydomain.com:root/Microsoft/...rResourceRecord) [Get-DnsServerResourceRecord], CimException
• FullyQualifiedErrorId : WIN32 5,Get-DnsServerResourceRecord

Answer 5

please help in editing the syntax