This command lists running Windows services whose display name starts with “Windows”, sorts them by display name in descending order, and displays the result in a neat table.

Corrected version:

Get-Service * |
Select-Object Status, DisplayName |
Where-Object { $_.Status -eq "Running" -and $_.DisplayName -like "Windows*" } |
Sort-Object DisplayName -Descending |
Format-Table -AutoSize

Step-by-step explanation

1. Get-Service *

Get-Service *

Gets all Windows services on the computer.

The * wildcard means:

all services

So this returns services such as:

Windows Update
Windows Audio
Print Spooler
BITS

---

2. Pipeline |

|

The pipeline sends the output of one command to the next command.

Here, service objects are passed from:

Get-Service

to:

Select-Object

---

3. Select-Object Status, DisplayName

Select-Object Status, DisplayName

Keeps only two properties:

Property	Meaning
Status	Whether the service is Running, Stopped, etc.
DisplayName	The friendly service name shown to users

Example output at this stage:

Status   DisplayName
------   -----------
Running  Windows Audio
Stopped  Windows Search
Running  Windows Update

---

4. Where-Object { ... }

Where-Object { $_.Status -eq "Running" -and $_.DisplayName -like "Windows*" }

This filters the services.

Only services that meet both conditions are kept.

---

5. $_

$_

Means:

the current object in the pipeline

In this command, each $_ represents one service object.

---

6. $_.Status -eq "Running"

$_.Status -eq "Running"

Checks whether the service status is exactly:

Running

-eq means:

equals

---

7. -and

-and

Means both conditions must be true.

So the service must be:

Running

and its display name must start with:

Windows

---

8. $_.DisplayName -like "Windows*"

$_.DisplayName -like "Windows*"

Checks whether the service display name starts with Windows.

-like is used for wildcard pattern matching.

The * means:

anything after Windows

Examples that match:

Windows Audio
Windows Update
Windows Event Log
Windows Search

Examples that do not match:

Print Spooler
Background Intelligent Transfer Service

---

9. Sort-Object DisplayName -Descending

Sort-Object DisplayName -Descending

Sorts the remaining services by DisplayName.

-Descending means:

Z to A

Without -Descending, it would sort:

A to Z

---

10. Format-Table -AutoSize

Format-Table -AutoSize

Displays the final output as a table.

-AutoSize adjusts column widths so the output is easier to read.

---

Full meaning in one sentence

Get-Service * |
Select-Object Status, DisplayName |
Where-Object { $_.Status -eq "Running" -and $_.DisplayName -like "Windows*" } |
Sort-Object DisplayName -Descending |
Format-Table -AutoSize

means:

Get all services, keep only Status and DisplayName, filter only running services whose display name starts with “Windows”, sort them by DisplayName from Z to A, and display the result in a neat table.

Important note

Your original command has a curly closing quote here:

"Windows*“

Use a normal straight quote instead:

"Windows*"

REF: AI Tools/ChatGPT

Below, parent command means the main cmdlet being used: Get-ChildItem or Rename-Item.

---

1. Get-ChildItem -Path C:\Users\sayed\* -Include *.txt

Parent command: Get-ChildItem

Get-ChildItem lists files and folders in a location. It is similar to:

dir
ls
gci

Your rename-files lab explains that Get-ChildItem returns items from one or more locations and can be combined with filtering parameters such as -Include, -Exclude, -Recurse, and -Depth.

Parameters

-Path C:\Users\sayed\*

Means:

Look inside C:\Users\sayed\.

The * wildcard means:

Match all items inside that folder.

-Include *.txt

Means:

Include only files/items matching *.txt.

So this command means:

Show only .txt files under C:\Users\sayed\

Important: -Include usually works best when the path includes a wildcard *, or when used with -Recurse.

---

2. Get-ChildItem -Path C:\Users\sayed\* -Exclude A*

Parent command: Get-ChildItem

Again, this lists files and folders.

Parameters

-Path C:\Users\sayed\*

Looks at all items inside:

C:\Users\sayed\

-Exclude A*

Means:

Exclude items whose names start with A.

So this command means:

Show all items under C:\Users\sayed\, except items starting with A.

Example excluded names:

Assignment.txt
Archive
Apple.docx

---

3. Rename-Item -Path "C:\Test\test_file.txt" -NewName "mytest_file.txt"

Parent command: Rename-Item

Rename-Item changes the name of a file, folder, or registry key without changing its contents.

Parameters

-Path "C:\Test\test_file.txt"

Means:

This is the item to rename.

-NewName "mytest_file.txt"

Means:

Rename it to this new name.

So this command means:

Rename C:\Test\test_file.txt to mytest_file.txt.

After the command, the file becomes:

C:\Test\mytest_file.txt

Important: -NewName should be the new name only, not usually a full new path.

---

4. Get-ChildItem *.txt | Rename-Item -NewName { $_.Name -replace ".txt", ".log" } -WhatIf

Parent commands

This command uses two parent commands:

Get-ChildItem
Rename-Item

It uses the pipeline to send files from Get-ChildItem into Rename-Item.

---

Part 1

Get-ChildItem *.txt

Means:

Find all .txt files in the current folder.

---

Part 2

|

The pipeline sends each .txt file object to Rename-Item.

---

Part 3

Rename-Item -NewName { $_.Name -replace ".txt", ".log" }

This renames each file.

$_

Means:

The current file object coming through the pipeline.

$_.Name

Means:

The current file’s name.

-replace ".txt", ".log"

Means:

Replace .txt with .log.

So:

report.txt

would become:

report.log

---

Part 4

-WhatIf

Means:

Show what would happen, but do not actually rename the files.

This is a safety option.

So the full command means:

Find all .txt files in the current folder and show how they would be renamed to .log files, but do not actually rename them.

---

Compare and Contrast

Command	Main Purpose	Changes Anything?	Scope
Get-ChildItem -Include	Shows only matching items	No	File/folder listing
Get-ChildItem -Exclude	Hides matching items	No	File/folder listing
Rename-Item -Path ... -NewName ...	Renames one specific item	Yes	One file/folder
Get-ChildItem ... | Rename-Item ... -WhatIf	Simulates bulk rename	No, because of -WhatIf	Multiple files

---

Key Difference: -Include vs -Exclude

Parameter	Meaning
-Include *.txt	Show only .txt files
-Exclude A*	Show everything except names starting with A

---

Key Difference: Single Rename vs Bulk Rename

Single rename

Rename-Item -Path "C:\Test\test_file.txt" -NewName "mytest_file.txt"

Used when you know the exact file.

Bulk rename

Get-ChildItem *.txt |
Rename-Item -NewName { $_.Name -replace ".txt", ".log" } -WhatIf

Used when many files need the same pattern-based rename.

---

Safe teaching version

Always test bulk renaming first with:

-WhatIf

Then, after confirming the output is correct, remove -WhatIf:

Get-ChildItem *.txt |
Rename-Item -NewName { $_.Name -replace ".txt", ".log" }

Student comment:

# This command finds all .txt files and uses Rename-Item to change
# their extension to .log. The -WhatIf parameter previews the changes
# without actually renaming the files.

REF: AI Tools/ChatGPT

These four commands are all disk/partition viewing commands, but they look at different levels of storage.

The disk-management lab explains that Get-Disk shows logical disks, Get-PhysicalDisk shows physical disk devices, and Get-Partition is used to view partition information for a disk.

Command	Main Purpose	Level
Get-Disk | Format-Table -Auto	Shows disks in a clean table	Disk level
Get-PhysicalDisk	Shows physical storage devices	Hardware/storage level
Get-Partition -DiskNumber 0	Shows all partitions on disk 0	Partition level
Get-Partition -DriveLetter D	Shows the partition assigned to drive D:	Specific drive-letter partition

---

1. Get-Disk | Format-Table -Auto

Get-Disk | Format-Table -Auto

Shows the disks Windows recognizes.

Useful for checking:

Disk number
Size
Health status
Operational status
Partition style: RAW, MBR, GPT

Format-Table -Auto only improves display by auto-sizing columns.

Use this first when asking:

What disks are connected, and are they initialized?

---

2. Get-PhysicalDisk

Get-PhysicalDisk

Shows the actual physical storage devices.

Useful for checking:

Friendly name
Media type
CanPool
Health status
Operational status
Size

This is more useful when working with:

Storage Spaces
Physical drives
Hardware-level disk information

Simple difference:

Get-Disk = disks Windows can manage logically
Get-PhysicalDisk = actual physical storage devices

---

3. Get-Partition -DiskNumber 0

Get-Partition -DiskNumber 0

Shows all partitions on Disk 0.

Useful for seeing:

System partition
Recovery partition
C: partition
EFI partition
Reserved partition

Use this when asking:

What partitions exist on this disk?

Example:

Disk 0 may contain C:, EFI, Recovery, and system partitions.

---

4. Get-Partition -DriveLetter D

Get-Partition -DriveLetter D

Shows the partition that owns drive letter D:.

Useful when asking:

Which partition is my D: drive?

It gives partition information such as:

DiskNumber
PartitionNumber
DriveLetter
Size
Type

This is more specific than -DiskNumber.

---

Key Comparison

Get-Disk

answers:

What disks exist?

Get-PhysicalDisk

answers:

What physical storage devices exist?

Get-Partition -DiskNumber 0

answers:

What partitions are on disk 0?

Get-Partition -DriveLetter D

answers:

Which partition corresponds to D:?

---

Teaching Flow

Use them in this order:

Get-Disk | Format-Table -Auto

Then inspect a disk:

Get-Partition -DiskNumber 0

Then inspect one drive letter:

Get-Partition -DriveLetter D

Then compare physical storage:

Get-PhysicalDisk

Student comment:

# Get-Disk shows disks, Get-PhysicalDisk shows physical devices,
# and Get-Partition shows partitions either by disk number or drive letter.

REF: AI Tools/ChatGPT

explain: Get-Disk | Where PartitionStyle -eq “RAW” | Initialize-Disk -PartitionStyle GPT -PassThru | New-Partition -UseMaximumSize -AssignDriveLetter | Format-Volume -FileSystem NTFS -NewFileSystemLabel “MYDATA”

This command performs the full setup of a new RAW disk in one PowerShell pipeline:

Get-Disk |
Where PartitionStyle -eq "RAW" |
Initialize-Disk -PartitionStyle GPT -PassThru |
New-Partition -UseMaximumSize -AssignDriveLetter |
Format-Volume -FileSystem NTFS -NewFileSystemLabel "MYDATA"

Full meaning

Find any uninitialized disk, initialize it as GPT, create one large partition, assign a drive letter, and format it as NTFS with the label MYDATA.

---

Step-by-step explanation

1. Find disks

Get-Disk

Lists all disks connected to the system.

---

2. Select only RAW disks

Where PartitionStyle -eq "RAW"

Filters only disks whose partition style is RAW.

RAW means:

The disk is new or uninitialized.

---

3. Initialize the disk as GPT

Initialize-Disk -PartitionStyle GPT -PassThru

This prepares the disk for use.

GPT means GUID Partition Table, the modern partition style.

-PassThru is important here because it sends the initialized disk object to the next command in the pipeline.

Without -PassThru, the next command may not receive the disk object.

---

4. Create a partition

New-Partition -UseMaximumSize -AssignDriveLetter

Creates one partition using all available disk space.

-UseMaximumSize means:

Use the full disk space.

-AssignDriveLetter means:

Automatically assign a drive letter, such as E: or F:

---

5. Format the volume

Format-Volume -FileSystem NTFS -NewFileSystemLabel "MYDATA"

Formats the new partition.

NTFS is the Windows file system.

MYDATA is the volume label/name that appears in File Explorer.

---

What happens after running it?

A new usable drive appears, for example:

E:  MYDATA

You can then store files on it.

---

Very important warning

This command can erase or prepare disks. Use it only on a new test disk, preferably inside a VM.

Before running it, always check:

Get-Disk

Safer version:

Get-Disk | Where-Object PartitionStyle -eq "RAW"

Then confirm the correct disk before initializing.

---

Student comment

# This command finds uninitialized RAW disks, initializes them using GPT,
# creates one full-size partition, assigns a drive letter,
# and formats the volume as NTFS with the label MYDATA.

REF: AI Tools/ChatGPT

Yes. These commands produce the same type of output: process Name, Id, and CPU, sorted by CPU in descending order.

Variation 1: Full cmdlet names

Get-Process |
Select-Object -Property Name, Id, CPU |
Sort-Object -Property CPU -Descending

Variation 2: Sort first, then select

Get-Process |
Sort-Object -Property CPU -Descending |
Select-Object -Property Name, Id, CPU

Variation 3: Use aliases

gps | select Name,Id,CPU | sort CPU -Descending

Variation 4: Show only top 10 highest CPU processes

Get-Process |
Sort-Object CPU -Descending |
Select-Object Name, Id, CPU -First 10

Best teaching version:

Get-Process |
Sort-Object -Property CPU -Descending |
Select-Object -Property Name, Id, CPU

Comment:

# This command gets all running processes, sorts them by CPU time from highest to lowest,
# and displays only the Name, Id, and CPU properties.

REF: AI Tools/ChatGPT

This command shows running processes with selected columns and sorts them by CPU usage/time.

Get-Process | Select Name,Id,CPU | Sort CPU -Descending

Meaning step by step

1. Get-Process

Get-Process

Gets all running processes on the computer.

---

2. Pipeline |

|

Passes the process objects to the next command.

---

3. Select Name,Id,CPU

Select Name,Id,CPU

Short form of:

Select-Object Name, Id, CPU

It displays only these properties:

Property	Meaning
Name	Process name
Id	Process ID
CPU	Total CPU seconds used by the process

---

4. Sort CPU -Descending

Sort CPU -Descending

Short form of:

Sort-Object CPU -Descending

It sorts the output by CPU from highest to lowest.

---

Full meaning

Get-Process | Select Name,Id,CPU | Sort CPU -Descending

means:

Get all running processes, show only Name, Id, and CPU, then sort them from highest CPU time to lowest CPU time.

Better formal version

Get-Process |
Select-Object Name, Id, CPU |
Sort-Object CPU -Descending

Student comment

# This command lists running processes, selects only the Name, Id, and CPU properties,
# and sorts the results by CPU usage in descending order.

Ref: AI Tools/ChatGPT

Write-Output vs Write-Host in PowerShell

Feature	Write-Output	Write-Host
Sends data to pipeline	✅ Yes	❌ No
Can be stored in variable	✅ Yes	❌ Usually no
Can be redirected to file	✅ Yes	❌ Not normally useful
Used for script output	✅ Recommended	⚠️ Mainly for display messages
Supports formatting/color	Limited	✅ Good for colors

---

1. Write-Output

Write-Output sends data to the PowerShell pipeline.

Write-Output "Hello PowerShell"

You can store it:

$result = Write-Output "Hello PowerShell"
$result

You can pipe it:

Write-Output "Hello PowerShell" | Get-Member

You can redirect it:

Write-Output "Hello PowerShell" > C:\Temp\output.txt

Use Write-Output when the data may need to be reused, filtered, piped, stored, or exported.

---

2. Write-Host

Write-Host writes directly to the screen/console.

Write-Host "Hello PowerShell"

It is useful for colored messages:

Write-Host "Success" -ForegroundColor Green
Write-Host "Warning" -ForegroundColor Yellow
Write-Host "Error" -ForegroundColor Red

But it does not send normal output to the pipeline.

Example:

$result = Write-Host "Hello PowerShell"
$result

$result will not contain "Hello PowerShell".

---

Main Difference

Write-Output "Data"

means:

Send this data forward in the pipeline.

Write-Host "Message"

means:

Show this message on the screen.

---

Teaching Example

Write-Output "notepad" | Get-Process

This can work because "notepad" is passed through the pipeline.

But:

Write-Host "notepad" | Get-Process

will not work the same way because Write-Host only prints to the screen.

---

Best Practice

Use:

Write-Output

for real script output.

Use:

Write-Host

for user-friendly messages, colors, headings, or progress-style display.

Example:

Write-Host "Checking services..." -ForegroundColor Cyan
Get-Service | Where-Object Status -eq "Running"

REF: AI Tools/ChatGPT

This command finds uninitialized disks and initializes them using the GPT partition style:

Get-Disk | Where PartitionStyle -eq "RAW" | Initialize-Disk -PartitionStyle GPT

Step-by-step explanation

1. Get-Disk

Get-Disk

Lists disks connected to the system.

It shows information such as:

Number
FriendlyName
OperationalStatus
Size
PartitionStyle

---

2. Where PartitionStyle -eq "RAW"

Where PartitionStyle -eq "RAW"

Filters only disks where the PartitionStyle is RAW.

RAW usually means:

The disk has not been initialized yet.

So PowerShell is looking for a new/unprepared disk.

---

3. Initialize-Disk -PartitionStyle GPT

Initialize-Disk -PartitionStyle GPT

Initializes the selected RAW disk and sets the partition style to GPT.

GPT means:

GUID Partition Table

GPT is the modern partitioning style and is recommended for most new systems. Your lab notes explain that GPT is more modern and reliable than MBR, supports many partitions, and supports disks larger than 2 TB.

---

Full meaning

Get-Disk | Where PartitionStyle -eq "RAW" | Initialize-Disk -PartitionStyle GPT

means:

Get all disks, find the disks that are not initialized, and initialize them using GPT.

---

Important warning

This command can affect disks. Students should run it only on a test VM disk, not on a real important disk.

Safer version:

Get-Disk | Where-Object PartitionStyle -eq "RAW"

First check which disk is RAW.

Then initialize a specific disk:

Initialize-Disk -Number 1 -PartitionStyle GPT

---

What comes after this?

Initializing the disk does not create a usable drive letter yet.

Usually the next steps are:

New-Partition -DiskNumber 1 -UseMaximumSize -AssignDriveLetter

Then format it:

Format-Volume -DriveLetter E -FileSystem NTFS -NewFileSystemLabel "DataDisk"

---

Student comment

# This command finds disks with RAW partition style and initializes them as GPT.
# RAW means the disk is not initialized. GPT is the modern partition style.
Ref: AI/ChatGPT