Invoke-Command

Run commands on local and remote computers.

Syntax
    
    Invoke-Command [-FilePath] string [[-ComputerName] string[]] 
       [-ApplicationName string] [-AsJob] [-Authentication AuthenticationMechanism]
          [-ConfigurationName string] [-Credential PSCredential] [-HideComputerName]
             [-JobName string] [-Port int] [-SessionOption PSSessionOption] [-ThrottleLimit int] 
                [-UseSSL] [-ArgumentList Object[]] [-InputObject psobject] [CommonParameters]

    Invoke-Command [-FilePath] string [[-Session] PSSession[]] [-AsJob]
       [-HideComputerName] [-JobName string] [-ThrottleLimit int]
          [-ArgumentList Object[]] [-InputObject psobject] [CommonParameters]

    Invoke-Command [-FilePath] string [[-ConnectionURI] Uri[]] [-AllowRedirection]
       [-AsJob] [-Authentication AuthenticationMechanism]
          [-ConfigurationName string] [-Credential PSCredential] [-HideComputerName]
             [-JobName string] [-SessionOption PSSessionOption] [-ThrottleLimit int]
                [-ArgumentList Object[]] [-InputObject psobject] [CommonParameters]

    Invoke-Command [-ScriptBlock] scriptblock
       [-ArgumentList Object[]] [-InputObject psobject] [CommonParameters]

    Invoke-Command [-ScriptBlock] scriptblock [[-ComputerName] string[]]
       [-ApplicationName string] [-AsJob] [-Authentication AuthenticationMechanism]
          [-CertificateThumbprint string] [-ConfigurationName string] 
             [-Credential PSCredential] [-HideComputerName] [-JobName string]
                [-Port int] [-SessionOption PSSessionOption] [-ThrottleLimit int]
                   [-UseSSL] [-ArgumentList Object[]] [-InputObject psobject] [CommonParameters]

    Invoke-Command [-ScriptBlock] scriptblock [[-Session] PSSession[]]
       [-AsJob] [-HideComputerName] [-JobName string] [-ThrottleLimit int]
          [-ArgumentList Object[]] [-InputObject psobject] [CommonParameters]

    Invoke-Command [-ScriptBlock] scriptblock [[-ConnectionURI] Uri[]] [-AllowRedirection] 
       [-AsJob] [-Authentication AuthenticationMechanism] [-CertificateThumbprint string]
          [-ConfigurationName string] [-Credential PSCredential] [-HideComputerName]
             [-JobName string] [-SessionOption PSSessionOption] [-ThrottleLimit int]
                [-ArgumentList Object[]] [-InputObject psobject] [CommonParameters]

Key
   -AllowRedirection
       Allow redirection of this connection to an alternate URI.

       When -ConnectionURI is used, the remote destination can return an instruction to
       redirect to a different URI. By default, PowerShell does not redirect connections,
       the AllowRedirection parameter changes this to allow the connection to redirect.

       The number of times that the connection is redirected can be limited by setting the
       MaximumConnectionRedirectionCount property of the $PSSessionOption preference variable,
       or the MaximumConnectionRedirectionCount property of the value of -SessionOption.
       The default value is 5. For more information, see New-PSSessionOption.

   -ApplicationName string
       The application name segment of the connection URI.
       Specify the application name when you are not using -ConnectionURI

       The default value is the value of the $PSSessionApplicationName preference variable on
       the local computer. If this preference variable is not defined, the default value is WSMAN.
       This value is appropriate for most uses. For more info, see about_Preference_Variables.

       The WinRM service uses the application name to select a listener to service the connection
       request. The value of this parameter should match the value of the URLPrefix property of
       a listener on the remote computer.

   -ArgumentList Object[]
       Set local variables in the command.
       The variables in the command are replaced by these values before the command is run on
       the remote computer. Enter the values in a comma-separated list.
       Values are associated with variables in the order that they are listed.

       The values in ArgumentList can be actual values, such as "1024", or they can be
       references to local variables, such as "$max".

       To use local variables in a command, use the following command format:
          {param($name1[, $name2]...) command-with-local-variables} -ArgumentList value | $local-variable

       The "param" keyword lists the local variables that are used in the command.
       The -ArgumentList parameter supplies the values of the variables, in the order that they are listed.
       An alias for -ArgumentList is "-Args".

   -AsJob
       Run the command as a background job on a remote computer.
       Use this parameter to run commands that take an extensive time to complete.

       This will return an object that represents the job, and then display the command prompt.
       You can continue to work in the session while the job completes.
       To manage the job, use the Job cmdlets. To get the job results, use Receive-Job. 

       Using -AsJob is similar to using Invoke-Command to run a Start-Job command remotely. However,
       with -AsJob, the job is created on the local computer, even though the job runs on a remote computer,
       and the results of the remote job are automatically returned to the local computer.
       For more information, see help about_Jobs and help about_Remote_Jobs.

   -Authentication AuthenticationMechanism
       The mechanism used to authenticate the user's credentials.
       Valid values are:
           Default, Basic,  Credssp, Digest, Kerberos, Negotiate, and NegotiateWithImplicitCredential.
       The default value is Default.
       CredSSP authentication is available only in Vista, Server 2008, and later versions of Windows.

       CAUTION: CredSSP authentication increases the security risk of the remote operation.
       If the remote computer is compromised, the credentials that are passed to it can
       be used to control the network session.

   -CertificateThumbprint string
       The digital public key certificate (X509) of a user account that has permission to
       perform this action. Enter the certificate thumbprint of the certificate.

       Certificates are used in client certificate-based authentication.
       They can only be mapped to local user accounts; they do not work with domain accounts.

       To get a certificate thumbprint, use Get-Item or GCI commands in the PowerShell Cert: drive.

   -ComputerName string[]
       The computers on which to run the command.
       The default is the local computer.

       When you use -ComputerName,  PowerShell will create a temporary connection that is
       used only to run the specified command and is then closed.
       If you need a persistent connection, use -Session

       Type the NETBIOS name, IP address, or fully-qualified domain name of one or more computers
       in a comma-separated list. To specify the local computer, type the computer name, "localhost", or a dot (.)

       To use an IP address in the value of -ComputerName , the command must include -Credential.
       Also, the computer must be configured for HTTPS transport or the IP address of the remote
       computer must be included in the WinRM TrustedHosts list on the local computer.
       See also: "How to Add  a Computer to the Trusted Host List" in help about_Remote_Troubleshooting.

       Note: On Vista, and later, to include the local computer in the value of -ComputerName, you must
       open PowerShell with the "Run as administrator" option.

   -ConfigurationName string
       The session configuration to be used for the new PSSession.

       Enter a configuration name or the fully qualified resource URI for a session configuration.
       If only the configuration name is specified, the following schema URI is prepended:
          http://schemas.microsoft.com/powershell

       The session configuration for a session is located on the remote computer.
       If the specified session configuration does not exist on the remote computer, the command fails.

       The default value is the value of the $PSSessionConfigurationName preference variable on
       the local computer. If this preference variable is not set, the default is Microsoft.PowerShell

   -ConnectionURI Uri[]
       A Uniform Resource Identifier (URI) that defines the connection endpoint.
       The URI must be fully qualified.

       The format of this string is: 
            Transport://ComputerName:Port/ApplicationName

       The default value is:
            http://localhost:5985/WSMAN

       Valid values for the Transport segment of the URI are HTTP and HTTPS.
       If you do not specify a -ConnectionURI, the -UseSSL, -ComputerName, -Port, and -ApplicationName
       parameters can be used to specify the individual URI values.

       If the destination computer redirects the connection to a different URI, PowerShell will
       prevent the redirection unless the -AllowRedirection parameter is included in the command.

   -Credential PSCredential
       A user account that has permission to perform this action. The default is the current user.

       Type a user name, such as "User64" or "Domain64\User64", or enter a variable that
       contains a PSCredential object, such as one generated by Get-Credential.
       When you type a user name, you will be prompted for a password.

   -FilePath string
       Run the specified local script on one or more remote computers.
       Enter the path and file name of the script, or pipe a script path to Invoke-Command.
       The script must reside on the local computer or in a directory that the local computer can
       access. Use -ArgumentList to specify the values of parameters in the script.

       When you use this parameter, PowerShell converts the contents of the specified script
       file to a script block, transmits the script block to the remote computer, and runs it
       on the remote computer.

   -HideComputerName
       Omit the computer name of each object from the output display.
       By default, the name of the computer that generated the object appears in the display.

       This parameter affects only the output display. It does not change the object.

   -InputObject psobject
       Specifies input to the command. Enter a variable that contains the object(s) or type
       a command or expression that gets the object(s).

       When the -InputObject parameter is used to submit a collection of items,
       Invoke-Command receives one object that represents the collection.
       Because a collection object cannot be invoked, Invoke-Command returns the entire collection unchanged.

       To invoke multiple items, pipe them to Invoke-Command.

       This parameter is an implementation detail: its purpose is to enable input via the pipeline, and its
       direct use with arrays (collections) does not (yet) provide any useful functionality.

   -JobName string
       A friendly name for the background job.
       By default, jobs are named "Jobn", where n is an ordinal number.
       This parameter is valid only with -AsJob.

       If -JobName is used in a command, -AsJob is implied, even if -AsJob is missing from the command.
       For more information about PowerShell background jobs, see help about_Jobs.

    -Port int
       The network port  on the remote computer used for this command.
       The default is port 80 (the HTTP port).

       Before using an alternate port, configure the WinRM listener on the remote computer
       to listen at that port.
       To configure the listener:
           remove-item -path wsman:\Localhost\listener\listener* -recurse
           new-item -path wsman:\Localhost\listener -Transport http -Address * -port port-number

       Do not use -Port parameter unless you must. The Port set in the command applies to all
       computers or sessions on which the command runs. An alternate port setting might prevent
       the command from running on all computers.

   -ScriptBlock scriptblock
       The commands to run.
       Enclose the commands in curly braces { } to create a script block.
       This parameter is required.

       By default, any variables in the command are evaluated on the remote computer.
       To include local variables in the command, use -ArgumentList
       or in PowerShell 3.0+ use the prefix $using: before the local variable to be passed
       e.g.  { echo $using:mylocalVar }
        
   -Session PSSession[]
       Run the command in the specified PowerShell sessions (PSSessions).
       Enter a variable that contains the PSSessions or a command that creates or gets
       the PSSessions, such as New-PSSession or Get-PSSession.

       Using -Session establishes a persistent connection to the remote computer.
       Use this to run a series of related commands that share data.
       To run a single command or a series of unrelated commands, use -ComputerName
       To create a PSSession, use New-PSSession.

   -SessionOption PSSessionOption
       Set advanced options for the session.
       Enter a SessionOption object that you create by using New-PSSessionOption

       The default values for the options are determined by the value of the
       $PSSessionOption preference variable, if set. Otherwise, the session uses the system defaults.

   -ThrottleLimit int
       The maximum number of concurrent connections that can be established to run this command.
       If you omit this parameter or enter a value of 0, the default value, 32, is used.

       The throttle limit applies only to the current command, not to the session or to the computer.

   -UseSSL
       Use the Secure Sockets Layer (SSL) protocol to establish a connection to the remote computer.
       By default, SSL is not used.

       WS-Management encrypts all PowerShell content transmitted over the network. -UseSSL is
       an additional protection that sends the data across an HTTPS, instead of HTTP.

       If you use this parameter, but SSL is not available on the port used for the command, the command fails.

Invoke-Command runs commands on a local or remote computer and returns all output from the commands, including errors. A single Invoke-Command command, can run commands on multiple computers.

To run a single command on a remote computer, use -ComputerName.

To run a series of related commands that share data, create a PSSession (a persistent connection) on the remote computer, and then use Invoke-Command -Session to run the command in the PSSession.

When retrieving information from a remote machine PowerShell will by default return an object with a large number of properties, performance can be greatly improved by using Select-Object to return only the properties needed.

Invoke-Command may also be used on a local computer to evaluate or run a string in a script block as a command. PowerShell converts the script block to a command and runs the command immediately in the current scope, instead of just echoing the string at the command line.

Before using Invoke-Command to run commands on a remote computer, read help about_Remote.

Standard Aliases for Invoke-Command: icm

Alternatives

Invoke-Command uses WSMAN to run commands on remote machines.
An alternative to this is using the CIM method Win32_Process Create() which can be run locally or remotely over RPC

Open a notepad process on a remote computer:

Invoke-CimMethod –ClassName Win32_Process –MethodName "Create" –Arguments @{ Path = "notepad.exe" }

Examples

List any running firefox processes running on 3 remote workstations:

PS C:\> invoke-command -ComputerName Workstation64,Workstation65,Workstation66 -ScriptBlock {Get-Process -Name 'firefox'}

Run the Test.ps1 script on the Server64 computer. The script is located on the local computer. The script runs on the remote computer and the results are returned to the local computer:

PS C:\> invoke-command -filepath c:\scripts\test.ps1 -computerName Server64

Run a script block (containing just a Get-Culture command) on the Server64 computer. Pass user credentials with permission to run the command:

PS C:\> invoke-command -computername server64 -credential domain64\user64 -scriptblock {get-culture}

Run the same "Get-Culture" command in a session (a persistent connection):

PS C:\> $sess = new-pssession -computername server64 -credential domain64\user64
PS C:\> invoke-command -session $sess -scriptblock {get-culture}

Save a command in a local variable, then use Invoke-Command to run the command against several remote computers:

PS C:\> $command = { get-eventlog -log "windows powershell" | where {$_.message -like "*certificate*"} }
PS C:\> invoke-command -computername Server64, Server65, Server102 -scriptblock $command

Get the version of the PowerShell host running on a remote computer:

PS C:\> invoke-command -computername server64 -scriptblock {(get-host).version}

Get the version of the PowerShell host running on a list of remote computers (computers.txt):

PS C:\> $version = invoke-command -computername (get-content computers.txt) -scriptblock {(get-host).version}
PS C:\> $version

Retrieve a registry value from a remote machine running under alternate credentials:

$cred = Get-Credential "domain\TashaR"; 
Invoke-Command -ComputerName "workstation64" {
     Process {
         Get-ItemProperty -Path 'HKCU:\Control Panel\PowerCfg\' -name CurrentPowerPolicy
     } 
} -AsJob -Credential $cred 

Run the delprof2 utility on workstation64, use the call operator & to run the non-PowerShell utility:

PS C:\> invoke-command -computername workstation64 -scriptblock {& "c:\Temp\delprof2.exe" '/q'}

Run a background job on two remote computers. Because the Invoke-Command command uses the AsJob parameter, the commands run on the remote computers, but the job actually resides on the local computer and the results are transmitted to the local computer:

PS C:\> $s = new-pssession -computername Server01, Server02
PS C:\> invoke-command -session $s -scriptblock {get-eventlog system} -AsJob
PS C:\> $j = Get-Job
PS C:\> $results = $j | Receive-Job

Run the Sample.ps1 script on all of the computers listed in the Servers.txt file. Using the -FilePath parameter to specify the script file has the effect that the content of the script is automatically copied into a script block and then passed to and run on each of the remote computers:

PS C:\> invoke-command -comp (get-content servers.txt) -filepath c:\scripts\sample.ps1 -argumentlist Process, Service

“There is another side to chivalry. If it dispenses leniency, it may with equal justification invoke control” ~ Freda Adler

Related PowerShell Cmdlets

How-To: Run a powershell script on a remote computer.
Get-Command - Retrieve basic information about a command.
Get-StartApps - Get the names and AppIDs of installed apps.
Invoke-Expression - Run a PowerShell expression.
Invoke-History - Invoke a previously executed Cmdlet.
Invoke-Item - Invoke an executable or open a file (START)
Enter-PSSession - Start an interactive session with a remote computer.
Test-WSMan - Test whether the WinRM service is running.
Start-Process - Start one or more processes, optionally as a specific user.
--% - Stop parsing input.
. (source) - Run a command script in the current shell (persist variables and functions).
Equivalent bash command: exec - Execute a command.


 
Copyright © 1999-2024 SS64.com
Some rights reserved