functions/Invoke-AdmfItem.ps1

function Invoke-AdmfItem {
    <#
    .SYNOPSIS
        Apply individual changes found by Test-AdmfDc, Test-AdmfDomain or Test-AdmfForest.
     
    .DESCRIPTION
        Apply individual changes found by Test-AdmfDc, Test-AdmfDomain or Test-AdmfForest.
        This allows applying individual changes, irrespective of domain or type.
 
        While this command accepts from the pipeline, it groups results by server and executes during the end phase.
        This is done to rationalize the application of credential providers, context switching and connection management.
     
    .PARAMETER TestResult
        The test results to apply.
        Output objects of Test-AdmfDc, Test-AdmfDomain or Test-AdmfForest.
     
    .PARAMETER Credential
        The credentials to use for this operation.
     
    .PARAMETER CredentialProvider
        The credential provider to use to resolve the input credentials.
        See help on Register-AdmfCredentialProvider for details.
     
    .PARAMETER Confirm
        If this switch is enabled, you will be prompted for confirmation before executing any operations that change state.
     
    .PARAMETER WhatIf
        If this switch is enabled, no actions are performed but informational messages will be displayed that explain what would happen if the command were to run.
     
    .EXAMPLE
        PS C:\> Test-AdmfDomain -Server contoso.com | Where-Object ObjectType -in User, Group | Where-Object ObjectType -eq Create | Invoke-AdmfItem
 
        Apply all create actions for all users and groups in contoso.com.
    #>

    [Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSAvoidUsingPlainTextForPassword', '')]
    [CmdletBinding(SupportsShouldProcess = $true)]
    Param (
        [Parameter(ValueFromPipeline = $true)]
        $TestResult,

        [PSCredential]
        $Credential,

        [string]
        $CredentialProvider = 'default'
    )
    
    begin {
        #region Functions
        function Invoke-TestResult {
            [CmdletBinding()]
            param(
                $TestResult,

                $Parameters
            )

            switch ($TestResult.ObjectType) {
                # DCManagement
                'Share' { $TestResult | Invoke-DCShare @Parameters }
                'FSAccessRule' { $TestResult | Invoke-DCAccessRule @Parameters }

                # DomainManagement
                'AccessRule' { $TestResult | Invoke-DMAccessRule @Parameters }
                'Acl' { $TestResult | Invoke-DMAcl @Parameters }
                'DomainLevel' { $TestResult | Invoke-DMDomainLevel @Parameters }
                'ExchangeVersion' { $TestResult | Invoke-DMExchange @Parameters }
                'GPLink' { $TestResult | Invoke-DMGPLink @Parameters }
                'GPOwner' { $TestResult | Invoke-DMGPOwner @Parameters }
                'GPPermission' { $TestResult | Invoke-DMGPPermission @Parameters }
                'GroupMembership' { $TestResult | Invoke-DMGroupMembership @Parameters }
                'GroupPolicy' { $TestResult | Invoke-DMGroupPolicy @Parameters }
                'Group' { $TestResult | Invoke-DMGroup @Parameters }
                'Object' { $TestResult | Invoke-DMObject @Parameters }
                'OrganizationalUnit' { $TestResult | Invoke-DMOrganizationalUnit @Parameters -Delete }
                'PSO' { $TestResult | Invoke-DMPasswordPolicy @Parameters }
                'ServiceAccount' { $TestResult | Invoke-DMServiceAccount @Parameters }
                'User' { $TestResult | Invoke-DMUser @Parameters }
                'WmiFilter' { $TestResult | Invoke-DMWmiFilter @parameters }

                # ForestManagement
                'Certificate' { $TestResult | Invoke-FMCertificate @Parameters }
                'ExchangeSchema' { $TestResult | Invoke-FMExchangeSchema @Parameters }
                'ForestLevel' { $TestResult | Invoke-FMForestLevel @Parameters }
                'NTAuthStore' { $TestResult | Invoke-FMNTAuthStore @Parameters }
                'Schema' { $TestResult | Invoke-FMSchema @Parameters }
                'SchemaDefaultPermission' { $TestResult | Invoke-FMSchemaDefaultPermission @Parameters }
                'SchemaLdif' { $TestResult | Invoke-FMSchemaLdif @Parameters }
                'Server' { $TestResult | Invoke-FMServer @Parameters }
                'SiteLink' { $TestResult | Invoke-FMSiteLink @Parameters }
                'Site' { $TestResult | Invoke-FMSite @Parameters }
                'Subnet' { $TestResult | Invoke-FMSubnet @Parameters }
            }
        }
        #endregion Functions

        $testResults = [System.Collections.Generic.List[object]]::new()
    }
    process {
        foreach ($result in $TestResult) {
            $hasName = $result.PSObject.TypeNames -match '^DomainManagement|^ForestManagement|^DCManagement'
            if (-not $hasName) {
                Write-PSFMessage -Level Warning -String 'Invoke-AdmfItem.Error.BadInput' -StringValues $result -Target $result
                continue
            }
            $testResults.Add($result)
        }
    }
    end {
        $resultGroups = $testResults | Group-Object Server
        foreach ($resultGroup in $resultGroups) {
            #region Prepare Credential Stuff
            Reset-DomainControllerCache

            $parameters = $PSBoundParameters | ConvertTo-PSFHashtable -Include Credential
            $parameters.Server = $resultGroup.Name

            try {
                $originalArgument = Invoke-PreCredentialProvider @parameters -ProviderName $CredentialProvider -Parameter $parameters
                Invoke-PSFCallback -Data $parameters -EnableException $true
                Set-AdmfContext @parameters -Interactive -ReUse -EnableException
            }
            catch {
                Write-PSFMessage -Level Warning -String 'Invoke-AdmfItem.Error.PrepareContext' -StringValues $resultGroup.Name, $resultGroup.Count -Target $resultGroup -ErrorRecord $_ -EnableException $true -PSCmdlet $PSCmdlet
                if ($originalArgument) {
                    try { Invoke-PostCredentialProvider -ProviderName $CredentialProvider -Server $originalArgument.Server -Credential $originalArgument.Credential }
                    catch { Write-PSFMessage -Level Warning -String 'Invoke-AdmfItem.Error.PostCredentialProvider' -StringValues $CredentialProvider, $resultGroup.Name, $resultGroup.Count -ErrorRecord $_ -Target $resultGroup -PSCmdlet $PSCmdlet }
                }
                continue
            }
            $parameters += $PSBoundParameters | ConvertTo-PSFHashtable -Include WhatIf, Confirm, Verbose, Debug
            $parameters.Server = $resultGroup.Name
            #endregion Prepare Credential Stuff

            #region Execute Test Results
            try {
                foreach ($resultItem in $resultGroup.Group) {
                    if (-not (Test-PSFShouldProcess -Target $resultItem -ActionString 'Invoke-AdmfItem.Processing.ShouldProcess' -ActionStringValues $resultItem.Server, $resultItem.ObjectType, $resultItem.Type, $resultItem.Identity -PSCmdlet $PSCmdlet)) {
                        continue
                    }
                    Write-PSFMessage -Level Host -String 'Invoke-AdmfItem.Processing' -Target $resultItem -StringValues $resultItem.Server, $resultItem.ObjectType, $resultItem.Type, $resultItem.Identity -PSCmdlet $PSCmdlet
                    Invoke-TestResult -TestResult $resultItem -Parameters $parameters
                }
            }
            #endregion Execute Test Results

            #region Post Processing
            catch {
                Write-PSFMessage -Level Warning -String 'Invoke-AdmfItem.Error.Execute' -StringValues $resultGroup.Name, $resultGroup.Count -Target $resultGroup -ErrorRecord $_ -EnableException $true -PSCmdlet $PSCmdlet
            }
            finally {
                try {
                    Disable-PSFConsoleInterrupt
                    Invoke-PostCredentialProvider -ProviderName $CredentialProvider -Server $originalArgument.Server -Credential $originalArgument.Credential
                }
                catch {
                    Enable-PSFConsoleInterrupt
                    Write-PSFMessage -Level Warning -String 'Invoke-AdmfItem.Error.PostCredentialProvider' -StringValues $CredentialProvider, $resultGroup.Name, $resultGroup.Count -ErrorRecord $_ -Target $resultGroup
                }
            }
            #endregion Post Processing
        }
    }
}