# Windows PowerShell Scripts

This topic contains Windows PowerShell scripts that can be run on the computers in a BizTalk Server environment to apply registry settings described in this guide.

Important
These scripts should only be run on Windows Server 2003, not on Windows Server 2008. While these scripts will execute successfully on Windows Server 2008, lab testing has indicated that these scripts do not provide any significant performance advantage on Windows Server 2008. These scripts should only be run on a Windows Server 2003 production environment after thorough testing and evaluation.

## Optimizing operating system performance through registry settings

The following Windows PowerShell script can be used to apply the registry settings described in Optimizing Operating System Performance.

Copy the script below into Notepad and save as Set-OSRegSettings.ps1. Then run the script on each computer in the BizTalk Server environment by following the instructions in Optimizing Operating System Performance:

```#Set-OSRegSettings.ps1
param(\$RAMMb, \$NumCPU,\$VolType)
if ((\$RAMMb -eq \$null) -or (\$NumCPU -eq \$null) -or (\$VolType -eq \$null) -or (\$VolType -gt 4))
{
"`r"
"Please specify required paramemters of -RAMMb and -NumCPU and -VolType"
"Usage: .\OSSettings.ps1 -RAMMb 2048 -NumCPU 2 -VolType 4"
"Valid VolType values are: 1(few files), 2 or 3(moderate files), 4(many files)"
"`r"
exit
}
\$ErrorActionPreference = "SilentlyContinue"
\$LogFileName="OSSettings.log"
\$LogTime=([System.DateTime]::Now).ToString("dd-MM-yyyy hh:mm:ss")
Add-Content \$LogFileName "*********** Settings changed at \$LogTime ************"

function SetProperty([string]\$path, [string]\$key, [string]\$Value)
{
#Clear Error Count
\$error.clear()
\$oldValue = (Get-ItemProperty -path \$path).\$key
#Set the Registry Key
Set-ItemProperty -path \$path -name \$key -Type DWORD -Value \$Value
#if error count is 0, regkey was updated OK
if (\$error.count -eq 0)
{
\$newValue = (Get-ItemProperty -path \$path).\$key
\$data =  "\$path\\$key=\$oldValue"
if(\$oldvalue -eq \$null)
{
Write-Output "Value for \$path\\$key created and set to \$newValue"
Add-Content \$LogFileName "Value for \$path\\$key created and set to \$newValue"
}
else
{
Write-Output "Value for \$path\\$key changed from \$oldValue to \$newValue"
Add-Content \$LogFileName "Value for \$path\\$key changed from \$oldValue to \$newValue"
}
}
#if error count is greater than 0 an error occurred and the regkey was not set
else
{
Add-Content \$LogFileName "Error: Could not set key \$path\\$key"
Write-Output "Error: Could not set key \$path\\$key"
Write-Output \$Error[\$error.count-1].exception
}
}

SetProperty "HKLM:\SYSTEM\CurrentControlSet\Services\ldap" "ldapclientintegrity" 0x0

#Work out Value of \$IoPageLockLimit
\$IoPageLockLimit = (\$RAMMb - 65) * 1024
if (\$IoPageLockLimit -gt 4294967295)
{
\$IoPageLockLimit = "0xFFFFFFFF"
}
else
{

\$IoPageLockLimit = "{0:X}" -f \$IoPageLockLimit
\$IoPageLockLimit = "0x" + \$IoPageLockLimit
}
SetProperty "HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" "IoPageLockLimit" (\$IoPageLockLimit)

else
{
}

SetProperty "HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" "MaxWorkItems" 8192
SetProperty "HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" "MaxMpxCt" 2048
SetProperty "HKLM:\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" "MaxCmds" 2048
#Value depends of -VolType parameter passed in
SetProperty "HKLM:\SYSTEM\CurrentControlSet\Control\FileSystem" "NtfsMftZoneReservation" \$VolType
SetProperty "HKLM:\SYSTEM\CurrentControlSet\Control\FileSystem" "NTFSDisableLastAccessUpdate" 1
SetProperty "HKLM:\SYSTEM\CurrentControlSet\Control\FileSystem" "NTFSDisable8dot3NameCreation" 1
SetProperty "HKLM:\SYSTEM\CurrentControlSet\Control\FileSystem" "DontVerifyRandomDrivers" 1
SetProperty "HKLM:\System\CurrentControlSet\Services\LanmanServer\Parameters" "Size" 3
SetProperty "HKLM:\System\CurrentControlSet\Control\Session Manager\Memory Management" "LargeSystemCache" 0
```

## Optimizing network performance through registry settings

The following Windows PowerShell script can be used to apply the registry settings described in Optimizing Network Performance.

Copy the script below into Notepad and save as Set-NetworkRegSettings.ps1. Then run the script on each computer in the BizTalk Server environment by following the instructions in Optimizing Network Performance:

```#Set-NetworkRegSettings.ps1
param([int] \$MTUSize = \$(throw "usage: ./Set-NetworkSettings <MTU Size>"))

\$LogFileName="NetworkRegSettings.log"
\$LogTime=([System.DateTime]::Now).ToString("dd-MM-yyyy hh:mm:ss")
Add-Content \$LogFileName "*********** Settings changed at \$LogTime ************"

function SetProperty([string]\$path, [string]\$key, [string]\$Value) {
\$oldValue = (Get-ItemProperty -path \$path).\$key
Set-ItemProperty -path \$path -name \$key -Type DWORD -Value \$Value
\$newValue = (Get-ItemProperty -path \$path).\$key
\$data =  "\$path\\$key=\$oldValue"
Write-Output "Value for \$path\\$key changed from \$oldValue to \$newValue"
}
SetProperty "HKLM:\System\CurrentControlSet\Control\Session Manager\Memory Management" "DisablePagingExecutive" 1
# Set SystemPages to 0xFFFFFFFF
# Maximize system pages. The system creates the largest number of page table entries possible within physical memory.
# The system monitors and adjusts this value dynamically when the configuration changes.
SetProperty "HKLM:\System\CurrentControlSet\Control\Session Manager\Memory Management" "SystemPages" 0xFFFFFFFF
# HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanServer\Parameters
# ============================================================================
\$path = "HKLM:\System\CurrentControlSet\Services\LanmanServer\Parameters"
\$returnValue = (Get-ItemProperty -path \$path).IRPStackSize
if ( \$returnValue -eq \$null) {
SetProperty \$path "IRPStackSize" 0x20 # IRPStackSize -> +10 (Use DWORD 0x20 (32) if not present)
}else{
\$returnValue = \$returnValue + 1
SetProperty \$path "IRPStackSize" \$returnValue
}
SetProperty \$path "SizReqBuf" 0x4000 # SizReqBuf -> 0x4000 (16384)

# HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
# =====================================================================
\$path = "HKLM:\System\CurrentControlSet\Services\Tcpip\Parameters"
SetProperty \$path "DefaultTTL" 0x40 # DefaultTTL -> 0x40 (64)
SetProperty \$path "EnablePMTUDiscovery" 1 # EnablePMTUDiscovery -> 1 (do not enable this if your server is directly exposed to potential attackers)
SetProperty \$path "EnablePMTUBHDetect" 1 # EnablePMTUBHDetect -> 1 (if your system is using a SOAP or HTTP and/or initiating web connections to other systems)
SetProperty \$path "TcpMaxDupAcks" 2 # TcpMaxDupAcks -> 2
SetProperty \$path "Tcp1323Opts" 1 # Tcp1323Opts -> 1 (experiment with a value of 3 for possible improved performance, especially if you are experiencing high packet loss/retransmits)
SetProperty \$path "SackOpts" 1 # SackOpts -> 1 (VERY important for large TCP window sizes, such as specified below)
SetProperty \$path "MaxFreeTcbs" 0x5000 # MaxFreeTcbs -> 0x5000 (20480)
SetProperty \$path "TcpMaxSendFree" 0xFFFF # TcpMaxSendFree -> 0xFFFF (65535)
SetProperty \$path "MaxHashTableSize" 0xFFFF # MaxHashTableSize -> 0xFFFF (65535)
SetProperty \$path "MaxUserPort" 0xFFFF # MaxUserPort -> 0xFFFF (65535)
SetProperty \$path "TcpTimedWaitDelay" 0x1E # TcpTimedWaitDelay -> 0x1E (30)
SetProperty \$path "GlobalMaxTcpWindowSize" 0xFFFF # GlobalMaxTcpWindowSize -> 0xFFFF (65535)
SetProperty \$path "NumTCPTablePartitions" 4 # NumTCPTablePartitions -> 2 per Processor/Core (include processor cores BUT NOT hyperthreading)
# TcpAckFrequency (requires Windows Server 2K3 Hotfix 815230)
# SetProperty \$path "TcpAckFrequency" 5 #5 for 100Mb, 13 for 1Gb (requires Windows Server 2K3 Hotfix 815230) - can also be set at the interface level if mixed speeds; only set for connections primarily processing data
SetProperty \$path "SynAttackProtect" 0 # SynAttackProtect -> 0 (Only set this on systems with web exposure if other H/W or S/W is providing DOS attack protection)
#Dedicated Network (DATA)
#------------------------
#Interfaces\<adapter ID>\MTU -> 1450-1500, test for maximum value that will pass on each interface using PING -f -l <MTU Size> <Interface Gateway Address>, pick the value that works across all interfaces
\$RegistryEntries = Get-ItemProperty -path "HKLM:\system\currentcontrolset\services\tcpip\parameters\interfaces\*"
foreach ( \$iface in \$RegistryEntries ) {
if ( \$ip -ne \$null ) { \$childName = \$iface.PSChildName}
else {
if (\$ip -ne \$null) { \$childName = \$iface.PSChildName }
}
\$Interface = Get-ItemProperty -path "HKLM:\system\currentcontrolset\services\tcpip\parameters\interfaces\\$childName"
\$path = \$Interface.PSPath
SetProperty \$path MTU \$MTUSize
}
\$path = "HKLM:\System\CurrentControlSet\Services\Tcpip\Parameters"
\$ForwardBufferMemory = 100*\$MTUSize
SetProperty \$path "ForwardBufferMemory" \$ForwardBufferMemory # ForwardBufferMemory -> 100*MTUSize, rounded up to the nearest 256 byte boundary
SetProperty \$path "MaxForwardBufferMemory" \$ForwardBufferMemory # MaxForwardBufferMemory -> ForwardBufferMemory
\$NumForwardPackets = \$ForwardBufferMemory/256
SetProperty \$path "NumForwardPackets" \$NumForwardPackets # NumForwardPackets -> ForwardBufferMemory / 256
SetProperty \$path "MaxNumForwardPackets" \$NumForwardPackets # MaxNumForwardPackets -> NumForwardPackets
SetProperty \$path "TcpWindowSize" 0xFBA4 # TcpWindowSize -> 0xFBA4 (64420) (make this a multiple of the TCP MSS (Max Segment Size)
# HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\AFD\Parameters
# ===================================================================
\$path = "HKLM:\SYSTEM\CurrentControlSet\Services\AFD\Parameters"
SetProperty \$path "EnableDynamicBacklog" 1 # EnableDynamicBacklog -> 1
SetProperty \$path "MinimumDynamicBacklog" 0xc8 # MinimumDynamicBacklog -> 0xc8 (200)
SetProperty \$path "MaximumDynamicBacklog" 0x4e20 # MaximumDynamicBacklog -> 0x4e20 (20000)
SetProperty \$path "DynamicBacklogGrowthDelta" 0x64 # DynamicBacklogGrowthDelta -> 0x64 (100)
#S/W Configuration
#=====================================================================
#Disable NETBIOS on cluster private network, if configured
```