{"id":5891,"date":"2015-05-28T00:01:00","date_gmt":"2015-05-28T00:01:00","guid":{"rendered":"https:\/\/blogs.technet.microsoft.com\/heyscriptingguy\/2015\/05\/28\/powershell-time-sync-error-handling-in-parallel-in-workflows\/"},"modified":"2019-02-18T09:47:43","modified_gmt":"2019-02-18T16:47:43","slug":"powershell-time-sync-error-handling-in-parallel-in-workflows","status":"publish","type":"post","link":"https:\/\/devblogs.microsoft.com\/scripting\/powershell-time-sync-error-handling-in-parallel-in-workflows\/","title":{"rendered":"PowerShell Time Sync: Error Handling in Parallel in Workflows"},"content":{"rendered":"

Summary: <\/b>Guest blogger, Rudolf Vesely talks about error handling in workflows and repair actions.<\/span><\/p>\n

Microsoft Scripting Guy, Ed Wilson, is here. Today is Part 2 of a 3-part series written by guest blogger Rudolf Vesely. Read yesterday’s post to catch up and to learn more about Rudolf: <\/b>PowerShell Time Sync: Get and Evaluate Synchronization State<\/a>. Take it away, Rudolf…<\/b><\/p>\n

Yesterday, I described the Time Sync module and I explained how the main inline script works. Those of you who checked my source code may realize that I used special error handling for the whole inline script (I do not mean error handling inside of the inline script).<\/p>\n

Note <\/b> Setting the operations discussed in today’s post require elevated rights; otherwise, you will get an Access is denied<\/b> error message.<\/p>\n

Parallel operations<\/h2>\n

When you run parallel operations, for example, using foreach –parallel {}<\/b>, or in my case, using {} –PSComputerName $multipleServers<\/b>, it is not possible to simply enclose whole inline script in a Try<\/b>\/Catch<\/b> block because multiple exceptions may happen at the same time. You need to catch all the exceptions in a specified variable (-PSError $myVar<\/b>), and then process them.<\/p>\n

If I run Get-VSystemTimeSynchronization<\/b> against a local server or against a single remote server, I do not do the operations in parallel; and therefore, I also need to use a Try<\/b>\/Catch<\/b> block.<\/p>\n

Later, I want to process all ErrorRecord<\/b> objects, and I do not care if the exception happened in standard or in parallel execution. This is the reason I save all errors to the same variable.<\/p>\n

try<\/p>\n

{<\/p>\n

    InlineScript<\/p>\n

    {<\/p>\n

        # Some code<\/p>\n

    } -PSComputerName $ComputerName `<\/p>\n

        -PSPersist:$false `<\/p>\n

        -PSError $inlineScriptErrorParallelItems<\/p>\n

}<\/p>\n

catch [System.Management.Automation.Remoting.PSRemotingTransportException]<\/p>\n

{<\/p>\n

    $inlineScriptErrorItems = $_<\/p>\n

}<\/p>\n

if ($inlineScriptErrorParallelItems) { $inlineScriptErrorItems = $inlineScriptErrorParallelItems }<\/p>\n

Now I have all the exceptions in the same variable and I can process it. Objects from parallel execution are enclosed in another object; therefore, I need to take them out of the Exception<\/b> property:<\/p>\n

foreach ($inlineScriptErrorFullItem in $inlineScriptErrorItems)<\/p>\n

{<\/p>\n

    if ($inlineScriptErrorFullItem.PSObject.Properties.Name -eq 'Exception')<\/p>\n

    {<\/p>\n

        $inlineScriptErrorItem = $inlineScriptErrorFullItem.Exception<\/p>\n

    }<\/p>\n

    else<\/p>\n

    {<\/p>\n

        $inlineScriptErrorItem = $inlineScriptErrorFullItem<\/p>\n

    }<\/p>\n

Then I continue with error handling. All objects are of the same type; and therefore, they have the same properties.<\/p>\n

Ignoring certain errors<\/h2>\n

I implemented a feature that allows you to ignore wrong computer names or computers that are not accessible. If you use it, you can, for example, specify to be notified when the time synchronization does not work (the Property<\/b> status of the output object is $false<\/b>), but you do not care when the computer is inaccessible (for example, because of network failure or during a service window).<\/p>\n

    # Ignore defined errors<\/p>\n

    if ($IgnoreError -contains 'WrongComputerName' -and<\/p>\n

        ($inlineScriptErrorItem.ErrorRecord.CategoryInfo | Select-Object -First 1 -ExpandProperty Category) -eq 'ResourceUnavailable' -and<\/p>\n

        $inlineScriptErrorItem.TransportMessage -like 'The network path was not found.*')<\/p>\n

    {<\/p>\n

        Write-Warning -Message 'Device does not exists (not in DNS).'<\/p>\n

    }<\/p>\n

    elseif ($IgnoreError -contains 'DeviceIsNotAccessible' -and<\/p>\n

        ($inlineScriptErrorItem.ErrorRecord.CategoryInfo | Select-Object -First 1 -ExpandProperty Category) -eq 'ResourceUnavailable' -and<\/p>\n

        $inlineScriptErrorItem.TransportMessage -like '*Verify that the specified computer name is valid, that the computer is accessible over the network*')<\/p>\n

    {<\/p>\n

        Write-Warning -Message 'Device exists (defined in DNS) but it is not reachable (not running, FW issue, etc.).'<\/p>\n

    }<\/p>\n

Logging errors<\/h2>\n

I wrote the main inline script so that any exceptions are captured and logged in the ErrorEvents<\/b> property of the output object. But when there is a mistake, I want to terminate the script immediately (for example, when an unhandled exception occurs). I wrote the workflow with $ErrorActionPreference = ‘Stop’<\/b> (all exceptions are terminating), so a simple Write-Error<\/b> is enough to terminate the script.<\/p>\n

    else<\/p>\n

    {<\/p>\n

        # Terminating error<\/p>\n

        Write-Error -Exception $inlineScriptErrorItem.ErrorRecord.Exception<\/p>\n

    }<\/p>\n

}<\/p>\n

That is all for the most important workflow, Get-VSystemTimeSynchronization<\/b>. Let‘s continue with Start-VSystemTimeSynchronization<\/b>.<\/p>\n

Start-VSystemTimeSynchronization<\/b> is a simple workflow to invoke time synchronization. As usual, I start with ErrorActionPreference<\/b> and I do not want to see the progress bars:<\/p>\n

$ErrorActionPreference = 'Stop'<\/p>\n

$ProgressPreference = 'SilentlyContinue' <\/span><\/p>\n

Start the Windows Time service<\/h2>\n

I need to start the W32Time (Windows Time) service to use the w32tm<\/b> command:<\/p>\n

if ((Get-Service -Name W32Time).Status -ne 'Running')<\/p>\n

{<\/p>\n

    Write-Verbose -Message '[Start] [Start service] [Verbose] Start service: W32Time (Windows Time)'<\/p>\n

    Start-Service -Name W32Time<\/p>\n

}<\/p>\n

Invoke time sync<\/h2>\n

Then I can invoke time synchronization. The most common command, w32tm \/resync \/force<\/b>, triggers immediate time synchronization, and command w32tm \/resync \/rediscover<\/b> rediscovers sources. Source rediscovery is important if the current source does not match the defined NTP server. This can happen, for example, when a computer cannot access the NTP server, and therefore, it uses only the internal clock. In this case, the current source is the internal clock, and that is not the desired state.<\/p>\n

if ($Rediscover)<\/p>\n

{<\/p>\n

    $w32tmOutput = InlineScript { & 'w32tm' '\/resync', '\/rediscover' }<\/p>\n

}<\/p>\n

elseif ($Force)<\/p>\n

{<\/p>\n

    $w32tmOutput = InlineScript { & 'w32tm' '\/resync', '\/force' }<\/p>\n

}<\/p>\n

else<\/p>\n

{<\/p>\n

    $w32tmOutput = InlineScript { & 'w32tm' '\/resync' }<\/p>\n

}<\/p>\n

At the end, it is handy to check if the command ran successfully and return a Boolean value that informs about it:<\/p>\n

if ($w32tmOutput | Select-String -Pattern 'The command completed successfully.')<\/p>\n

{<\/p>\n

    Write-Debug -Message ('[Start] [Synchronization] [Debug] Command completed successfully.')<\/p>\n

    $true<\/p>\n

}<\/p>\n

else<\/p>\n

{<\/p>\n

    Write-Warning -Message ('[Start] [Synchronization] [Error] Command did not completed successfully.')<\/p>\n

    $false<\/p>\n

}<\/p>\n

Wait for success<\/h2>\n

Another workflow in the module is Wait-VSystemTimeSynchronization<\/b>. This workflow basically uses the Get-VSystemTimeSynchronization<\/b> and Start-VSystemTimeSynchronization<\/b> workflows. It starts the time sync if needed and waits for success.<\/p>\n

It is possible to limit the number of attempts to fix the time synchronization. 0 (default) means infinite attempts,  1 means only one attempt, and so on.<\/p>\n

$repetitionCountCurrent = 1<\/p>\n

$status = $false<\/p>\n

while (!$status -and ($RepetitionCount -eq 0 -or $repetitionCountCurrent -le $RepetitionCount))<\/p>\n

{<\/p>\n

    if ($RepetitionCount -gt 0)<\/p>\n

    {<\/p>\n

        Write-Verbose -Message ('[Wait] Repetition: {0} \/ {1}' -f<\/p>\n

            $repetitionCountCurrent, $RepetitionCount)<\/p>\n

        $repetitionCountCurrent++<\/p>\n

    }<\/p>\n

    else<\/p>\n

    {<\/p>\n

        Write-Verbose -Message ('[Wait] Repetition')<\/p>\n

    }<\/p>\n

The current state is obtained from all the servers in parallel:<\/p>\n

$outputItems = Get-VSystemTimeSynchronization `<\/p>\n

            -ComputerName $ComputerName `<\/p>\n

            -RequiredSourceName $RequiredSourceName `<\/p>\n

            -RequiredSourceTypeConfiguredInRegistry $RequiredSourceTypeConfiguredInRegistry `<\/p>\n

            -RequiredSourceTypeNotLocal $RequiredSourceTypeNotLocal `<\/p>\n

            -RequiredSourceTypeNotByHost $RequiredSourceTypeNotByHost `<\/p>\n

            -LastTimeSynchronizationMaximumNumberOfSeconds $LastTimeSynchronizationMaximumNumberOfSeconds `<\/p>\n

            -CompareWithNTPServerName $CompareWithNTPServerName `<\/p>\n

            -CompareWithNTPServerMaximumTimeDifferenceSeconds $CompareWithNTPServerMaximumTimeDifferenceSeconds `<\/p>\n

            -IgnoreError $IgnoreError `<\/p>\n

            -Verbose:$false `<\/p>\n

            -PSPersist:$false<\/p>\n

Produce a report<\/h2>\n

Now let’s count the number of successful and unsuccessful results (custom objects from all servers). All unsuccessful results are divided into groups. One group is servers with the wrong source and another group is servers with other issues.<\/p>\n

$outputOKItems = $outputItems |<\/p>\n

    Where-Object -FilterScript { $_.Status -eq $true }<\/p>\n

$outputWrongSourceItems = $outputItems |<\/p>\n

    Where-Object -FilterScript { $_.StatusSourceName -eq $false -or $_.StatusSourceType -eq $false }<\/p>\n

$outputOtherErrorItems = $outputItems |<\/p>\n

    Where-Object -FilterScript { $_.Status -ne $true -and<\/p>\n

    ($_.StatusSourceName -ne $false -or $_.StatusSourceType -ne $false) }<\/p>\n

Now let’s do the corrective actions. If the server is in group with the wrong source, the corrective action is to rediscover the source. Other servers are only forced to run immediate synchronization.<\/p>\n

if ($CorrectiveActions -and ($outputWrongSourceItems -or $outputOtherErrorItems))<\/p>\n

{<\/p>\n

    if ($outputWrongSourceItems)<\/p>\n

    {<\/p>\n

        Write-Verbose -Message ('[Wait] Correction action: Rediscover ({0}): {1}' -f<\/p>\n

            @($outputWrongSourceItem).Count, ($outputWrongSourceItem.ComputerNameNetBIOS -join ', '))<\/p>\n

        $null = Start-VSystemTimeSynchronization `<\/p>\n

            -Rediscover:$true `<\/p>\n

            -PSComputerName $outputWrongSourceItem.ComputerNameNetBIOS<\/p>\n

    }<\/p>\n

    if ($outputOtherErrorItems)<\/p>\n

    {<\/p>\n

        Write-Verbose -Message ('[Wait] Correction action: Immediate synchronization ({0}): {1}' -f<\/p>\n

            @($outputOtherErrorItems).Count, ($outputOtherErrorItems.ComputerNameNetBIOS -join ', '))<\/p>\n

        $null = Start-VSystemTimeSynchronization `<\/p>\n

            -Force:$true `<\/p>\n

            -PSComputerName $outputWrongSourceItem.ComputerNameNetBIOS<\/p>\n

    }<\/p>\n

}<\/p>\n

else<\/p>\n

{<\/p>\n

    $status = $true<\/p>\n

}<\/p>\n

Now we wait a specified number of seconds before another attempt. If the current attempt is the last one, there is no reason to wait anymore.<\/p>\n

if ($RepetitionDelaySeconds -gt 0 -and<\/p>\n

    ($RepetitionCount -eq 0 -or $repetitionCountCurrent -le $RepetitionCount))<\/p>\n

{<\/p>\n

    Write-Debug -Message ('[Wait] [Debug] Delay: {0} seconds' -f<\/p>\n

            $RepetitionDelaySeconds)<\/p>\n

    Start-Sleep -Seconds $RepetitionDelaySeconds<\/p>\n

}<\/p>\n

At the end, all objects from Get-VSystemTimeSynchronization<\/b> are returned, regardless of the corrective action results:<\/p>\n

if ($outputItems)<\/p>\n

{<\/p>\n

    if (@($outputItems).Count -eq @($computerNameItems).Count)<\/p>\n

    {<\/p>\n

        Write-Verbose -Message ('[Wait] [Verbose] Finish: {0} devices' -f<\/p>\n

            @($outputItems).Count)<\/p>\n

    }<\/p>\n

    else<\/p>\n

    {<\/p>\n

        Write-Warning -Message ('[Wait] [Error] Not all devices were queried: {0} \/ {1}' -f<\/p>\n

                @($outputItems).Count, @($computerNameItems).Count)<\/p>\n

    }<\/p>\n

    $outputItems<\/p>\n

}<\/p>\n

else<\/p>\n

{<\/p>\n

    Write-Warning -Message ('[Wait] [Error] No data')<\/p>\n

}<\/p>\n

The output from the commands is shown in the following image:<\/p>\n

\"Image<\/a><\/p>\n

That is all for today. In the next and last post, I will explain the last two workflows from the Time Sync module.<\/p>\n

~Rudolf<\/p>\n

Thank you, Rudolf. Please join us tomorrow for the final post in this series. <\/p>\n

I invite you to follow me on Twitter<\/a> and Facebook<\/a>. If you have any questions, send email to me at scripter@microsoft.com<\/a>, or post your questions on the Official Scripting Guys Forum<\/a>. See you tomorrow. Until then, peace.<\/p>\n

Ed Wilson, Microsoft Scripting Guy<\/b> <\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

Summary: Guest blogger, Rudolf Vesely talks about error handling in workflows and repair actions. Microsoft Scripting Guy, Ed Wilson, is here. Today is Part 2 of a 3-part series written by guest blogger Rudolf Vesely. Read yesterday’s post to catch up and to learn more about Rudolf: PowerShell Time Sync: Get and Evaluate Synchronization State. […]<\/p>\n","protected":false},"author":596,"featured_media":87096,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[56,584,3,585,586,45,382],"class_list":["post-5891","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-scripting","tag-guest-blogger","tag-rudolf-vesely","tag-scripting-guy","tag-time-sync","tag-time-synchronization","tag-windows-powershell","tag-workflow"],"acf":[],"blog_post_summary":"

Summary: Guest blogger, Rudolf Vesely talks about error handling in workflows and repair actions. Microsoft Scripting Guy, Ed Wilson, is here. Today is Part 2 of a 3-part series written by guest blogger Rudolf Vesely. Read yesterday’s post to catch up and to learn more about Rudolf: PowerShell Time Sync: Get and Evaluate Synchronization State. […]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts\/5891","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/users\/596"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/comments?post=5891"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts\/5891\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/media\/87096"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/media?parent=5891"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/categories?post=5891"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/tags?post=5891"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}