Correct crash on PowerShell 5

backup.ps1

@@ -1,14 +1,19 @@
+param(
+    [Parameter(Mandatory=$true)]
+    [string]$SqlInstance
+)
+
 #
 # backup.ps1
 #
 # TODO: Update cleanup time based on backup type
 
-$sqlInstance = "sqlfcsql\TESTINST"
+$instanceName = $SqlInstance.Split('\')[1]
-#$directory = "H:\Backup"
+
-$directory = "C:\Rubrik\mount"
+$directory = "C:\Rubrik\$instanceName"
 $fullBackupDay = 'Thursday'
 $checkCluster = $false
-$logFile = "C:\Rubrik\backup.log"
+$logFile = "C:\Rubrik\backup-$instanceName.log"
 
 $fullFlag = $directory + "\last_full.flag"
 $diffFlag = $directory + "\last_diff.flag"
@@ -29,21 +34,35 @@ function Write-Log($message) {
     Write-Host $logEntry
 }
 
+# Check if directory exists and is a symbolic link
+if (-not (Test-Path $directory)) {
+    Write-Log "ERROR: Directory '$directory' does not exist. Exiting script."
+    exit 1
+}
+
+$directoryInfo = Get-Item $directory
+if (-not ($directoryInfo.Attributes -band [System.IO.FileAttributes]::ReparsePoint)) {
+    Write-Log "ERROR: Directory '$directory' is not a symbolic link. Exiting script."
+    exit 1
+}
+
+Write-Log "INFO: Directory '$directory' exists and is a symbolic link. Target: $($directoryInfo.Target). Proceeding."
+
 if ($checkCluster) {
     # Check if SQL instance is running locally
     $localNode = $env:COMPUTERNAME
-    $instanceName = $sqlInstance.Split('\')[1]
+    
     $clusterInstance = Get-ClusterResource | Where-Object { $_.ResourceType -eq "SQL Server" -and $_.Name -eq "SQL Server ($instanceName)" }
     if ($clusterInstance) {
         $ownerNode = $clusterInstance.OwnerNode.Name
         if ($ownerNode -ne $localNode) {
-            Write-Log "SQL instance '$sqlInstance' is not running on local node '$localNode'. Exiting script."
+            Write-Log "SQL instance '$SqlInstance' is not running on local node '$localNode'. Exiting script."
             exit 1
         } else {
-            Write-Log "SQL instance '$sqlInstance' is running on local node '$localNode'. Proceeding."
+            Write-Log "SQL instance '$SqlInstance' is running on local node '$localNode'. Proceeding."
         }
     } else {
-        Write-Log "ERROR: SQL instance '$sqlInstance' not found in cluster resources."
+        Write-Log "ERROR: SQL instance '$SqlInstance' not found in cluster resources."
         exit 1
     }
 } else {
@@ -77,7 +96,7 @@ if ((Get-Date).DayOfWeek -eq $fullBackupDay) {
 $query = "EXECUTE [dbo].[DatabaseBackup] @Databases = 'ALL_DATABASES', @Directory = '$directory', @BackupType = '$backupType', @Verify = 'N', @CleanupTime = $cleanupTime, @CheckSum = 'Y', @LogToTable = 'Y'"
 Write-Log "Executing backup type: $backupType"
 
-$sqlcmdOutput = & sqlcmd -S $sqlInstance -Q $query 2>&1
+$sqlcmdOutput = & sqlcmd -S $SqlInstance -Q $query 2>&1
 $sqlcmdExitCode = $LASTEXITCODE
 
 if ($sqlcmdExitCode -eq 0) {

createSAcreds.ps1

@@ -76,12 +76,16 @@ try {
   $logFile = Join-Path $tempDir "Create-SA-File.log"
 
   # ---- Create the one-shot script that will run under the service account ----
+  $escapedSaJsonPath = $SaJsonPath -replace '\\', '\\'
+  $escapedOutputXmlPath = $OutputXmlPath -replace '\\', '\\'
+  $escapedLogFile = $logFile -replace '\\', '\\'
+  
   $oneShotContent = @"
 # One-shot script created by create-and-run-one-shot-via-gMSA.ps1
 # Runs RubrikSecurityCloud command to create service-account file
 
 # Start transcript for detailed logging
-Start-Transcript -Path `"$logFile`" -Append
+Start-Transcript -Path "$escapedLogFile" -Append
 
 Write-Output "Script started at: `$(Get-Date)"
 Write-Output "Running as user: `$([System.Security.Principal.WindowsIdentity]::GetCurrent().Name)"
@@ -99,36 +103,36 @@ Try {
 }
 
 Try {
-    Write-Output "Checking input file: $SaJsonPath"
+    Write-Output "Checking input file: $escapedSaJsonPath"
     # Ensure the input file exists
-    if (-not (Test-Path -Path `"$SaJsonPath`")) {
+    if (-not (Test-Path -Path "$escapedSaJsonPath")) {
-        Write-Error "Input SA JSON not found: $SaJsonPath"
+        Write-Error "Input SA JSON not found: $escapedSaJsonPath"
         Stop-Transcript
         Exit 3
     }
-    Write-Output "Input file found, size: `$((Get-Item `"$SaJsonPath`").Length) bytes"
+    Write-Output "Input file found, size: `$((Get-Item "$escapedSaJsonPath").Length) bytes"
     
     Write-Output "Calling Set-RscServiceAccountFile..."
-    Write-Output "  Input: $SaJsonPath"
+    Write-Output "  Input: $escapedSaJsonPath"
-    Write-Output "  Output: $OutputXmlPath"
+    Write-Output "  Output: $escapedOutputXmlPath"
     
-    Set-RscServiceAccountFile `"$SaJsonPath`" -OutputFilePath `"$OutputXmlPath`" -Verbose
+    Set-RscServiceAccountFile "$escapedSaJsonPath" -OutputFilePath "$escapedOutputXmlPath" -Verbose
     
     Write-Output "Set-RscServiceAccountFile completed"
     
-    if (Test-Path -Path `"$OutputXmlPath`") {
+    if (Test-Path -Path "$escapedOutputXmlPath") {
-        Write-Output "Service account XML created successfully: $OutputXmlPath"
+        Write-Output "Service account XML created successfully: $escapedOutputXmlPath"
-        Write-Output "Output file size: `$((Get-Item `"$OutputXmlPath`").Length) bytes"
+        Write-Output "Output file size: `$((Get-Item "$escapedOutputXmlPath").Length) bytes"
         Stop-Transcript
         Exit 0
     } else {
-        Write-Error "Set-RscServiceAccountFile completed but output file not found: $OutputXmlPath"
+        Write-Error "Set-RscServiceAccountFile completed but output file not found: $escapedOutputXmlPath"
-        Write-Error "Checking parent directory: `$(Split-Path `"$OutputXmlPath`")"
+        Write-Error "Checking parent directory: `$(Split-Path "$escapedOutputXmlPath")"
-        if (Test-Path (Split-Path `"$OutputXmlPath`")) {
+        if (Test-Path (Split-Path "$escapedOutputXmlPath")) {
             Write-Output "Parent directory exists, listing contents:"
-            Get-ChildItem (Split-Path `"$OutputXmlPath`") | ForEach-Object { Write-Output "  `$(`$_.Name)" }
+            Get-ChildItem (Split-Path "$escapedOutputXmlPath") | ForEach-Object { Write-Output "  `$(`$_.Name)" }
         } else {
-            Write-Error "Parent directory does not exist: `$(Split-Path `"$OutputXmlPath`")"
+            Write-Error "Parent directory does not exist: `$(Split-Path "$escapedOutputXmlPath")"
         }
         Stop-Transcript
         Exit 4
@@ -142,29 +146,37 @@ Try {
 }
 "@
 
-  # Replace placeholders (so we don't have to escape too much)
-  $oneShotContent = $oneShotContent -replace '\$SaJsonPath', [Regex]::Escape($SaJsonPath)
-  $oneShotContent = $oneShotContent -replace '\$OutputXmlPath', [Regex]::Escape($OutputXmlPath)
-  $oneShotContent = $oneShotContent -replace '\$logFile', [Regex]::Escape($logFile)
-
   Set-Content -Path $oneShotScript -Value $oneShotContent -Encoding UTF8
 
   # Make sure executable by scheduled task
-  icacls $oneShotScript /grant "BUILTIN\Administrators:(R,W)" | Out-Null
+  try {
+    icacls $oneShotScript /grant "BUILTIN\Administrators:(R,W)" | Out-Null
+  } catch {
+    Write-Warning "Could not set permissions on script file: $($_.Exception.Message)"
+  }
 
   # ---- Build Scheduled Task objects ----
   # Construct the UserId based on account type
   if ($AccountType -eq 'gMSA') {
-    $userId = if ([string]::IsNullOrWhiteSpace($Domain)) { "$AccountName`$" } else { "$Domain\$AccountName`$" }
+    if ([string]::IsNullOrWhiteSpace($Domain)) {
+      $userId = "$AccountName`$"
+    } else {
+      $userId = "$Domain\$AccountName`$"
+    }
     $logonType = 'Password'  # For gMSA, use Password logon type
   } else {
-    $userId = if ([string]::IsNullOrWhiteSpace($Domain)) { $AccountName } else { "$Domain\$AccountName" }
+    if ([string]::IsNullOrWhiteSpace($Domain)) {
+      $userId = $AccountName
+    } else {
+      $userId = "$Domain\$AccountName"
+    }
     $logonType = 'Password'  # For regular service accounts, use Password logon type
   }
 
   # Action: run PowerShell to execute the one-shot script with output redirection
-  $psArgs = "-NoProfile -NonInteractive -ExecutionPolicy Bypass -File `"$oneShotScript`" *>&1 | Tee-Object -FilePath `"$logFile`" -Append"
+  $psExePath = Join-Path $env:WINDIR 'System32\WindowsPowerShell\v1.0\powershell.exe'
-  $action = New-ScheduledTaskAction -Execute (Join-Path $env:WINDIR 'System32\WindowsPowerShell\v1.0\powershell.exe') -Argument $psArgs
+  $psArgs = "-NoProfile -NonInteractive -ExecutionPolicy Bypass -File `"$oneShotScript`""
+  $action = New-ScheduledTaskAction -Execute $psExePath -Argument $psArgs
 
   # Trigger: once, a short time in the future (1 minute from now)
   $startTime = (Get-Date).AddMinutes(1)
@@ -185,8 +197,13 @@ Try {
     Write-Host "Registered scheduled task '$TaskName' to run as gMSA $userId at $startTime."
   } else {
     # For regular service accounts, register with password
-    $securePassword = if ($Password -is [SecureString]) { $Password } else { ConvertTo-SecureString $Password -AsPlainText -Force }
+    if ($Password -is [SecureString]) {
-    Register-ScheduledTask -TaskName $TaskName -InputObject $task -User $userId -Password ([Runtime.InteropServices.Marshal]::PtrToStringAuto([Runtime.InteropServices.Marshal]::SecureStringToBSTR($securePassword))) -Force
+      $securePassword = $Password
+    } else {
+      $securePassword = ConvertTo-SecureString $Password -AsPlainText -Force
+    }
+    $plainPassword = [Runtime.InteropServices.Marshal]::PtrToStringAuto([Runtime.InteropServices.Marshal]::SecureStringToBSTR($securePassword))
+    Register-ScheduledTask -TaskName $TaskName -InputObject $task -User $userId -Password $plainPassword -Force
     Write-Host "Registered scheduled task '$TaskName' to run as service account $userId at $startTime."
   }
 
@@ -205,27 +222,31 @@ Try {
     Start-Sleep -Seconds $pollInterval
     $elapsed += $pollInterval
 
-    $info = Get-ScheduledTaskInfo -TaskName $TaskName -ErrorAction SilentlyContinue
+    try {
-    if ($null -eq $info) {
+      $info = Get-ScheduledTaskInfo -TaskName $TaskName -ErrorAction SilentlyContinue
-      Write-Warning "Could not query task info yet."
+      if ($null -eq $info) {
-    } else {
+        Write-Warning "Could not query task info yet."
-      # LastTaskResult returns Win32 error code; 0 = success
+      } else {
-      $lastResult = $info.LastTaskResult
+        # LastTaskResult returns Win32 error code; 0 = success
-      $state = $info.State
+        $lastResult = $info.LastTaskResult
-      Write-Host "Task state: '$state'; LastResult: $lastResult"
+        $state = $info.State
-      
+        Write-Host "Task state: '$state'; LastResult: $lastResult"
-      # Task is complete if:
+        
-      # 1. State is Ready/Disabled/Unknown AND we have a valid LastResult
+        # Task is complete if:
-      # 2. OR if LastResult changed from 267009 (SCHED_S_TASK_RUNNING) to something else
+        # 1. State is Ready/Disabled/Unknown AND we have a valid LastResult
-      if (($state -eq 'Ready' -or $state -eq 'Disabled' -or $state -eq 'Unknown' -or [string]::IsNullOrEmpty($state)) -and 
+        # 2. OR if LastResult changed from 267009 (SCHED_S_TASK_RUNNING) to something else
-          ($lastResult -ne $null -and $lastResult -ne 267009)) {
+        if (($state -eq 'Ready' -or $state -eq 'Disabled' -or $state -eq 'Unknown' -or [string]::IsNullOrEmpty($state)) -and 
-        $taskCompleted = $true
+            ($null -ne $lastResult -and $lastResult -ne 267009)) {
-        break
+          $taskCompleted = $true
-      }
+          break
-      
+        }
-      if ($state -eq 'Running') {
+        
-        Write-Host "Task still running..."
+        if ($state -eq 'Running') {
+          Write-Host "Task still running..."
+        }
       }
+    } catch {
+      Write-Warning "Error querying task status: $($_.Exception.Message)"
     }
 
     if ($elapsed -ge $maxWaitSeconds) {
@@ -270,5 +291,11 @@ Try {
 
 } catch {
   Write-Error "ERROR: $($_.Exception.Message)"
+  if (-not $KeepArtifacts -and $TaskName) {
+    try { Unregister-ScheduledTask -TaskName $TaskName -Confirm:$false -ErrorAction SilentlyContinue } catch {}
+  }
+  if (-not $KeepArtifacts -and $tempDir -and (Test-Path $tempDir)) {
+    try { Remove-Item -Path $tempDir -Recurse -Force -ErrorAction SilentlyContinue } catch {}
+  }
   throw
 }