Public/Initialize-CMAgent.ps1
|
Function Initialize-CMAgent { <# .Synopsis Configures the Agent on the Client with all needed Dependencies .Description Configures the Agent on the Client with all needed Dependencies .Parameter Path Filepath for the working directory for this agent. Alias is 'P'. .Parameter Git Give the link to your Git Repository. Repo must be public to allow anonymous access. Alias is 'G'. .Parameter ActiveDirectory FQDN for your Active Directory. Alias is 'AD'. .Parameter LDAPUserName Username for querying AD. Format is 'Domain\Username'. Alias is 'U' .Parameter LDAPPassword Password for your LDAP user. Alias is 'P' .Parameter Filter The AD Filter for the group prefix which should be searched. Alias is 'F'. .Parameter Baseline The baseline configuration which always shoudld be applied. Only exists in git. Alias is 'B'. .Parameter TestGroup If this Group is set and the client is found in this group, the testing branch will be checked out. Alias is 'T'. .Parameter TestBranchName Define the name of the testing branch in git. Alias is 'TB'. .Example Initialize-CMAgent -Path "C:\ProgramData\Unibasel\CCM" -Git "https://github.com/your-repo.git" -ActiveDirectory "Your.ActiveDirectory.com" -Filter "prefix-ccm*" -Baseline "prefix-ccm-baseline" #> [CmdletBinding()] param( [Parameter(Mandatory = $true)] [Alias('P')] [string]$Path, [Parameter(Mandatory = $true)] [Alias('G')] [string]$Git, [Parameter(Mandatory = $true)] [Alias('AD')] [string]$ActiveDirectory, [Parameter(Mandatory = $true)] [Alias('U')] [string]$LDAPUserName, [Parameter(Mandatory = $true)] [Alias('PW')] [string]$LDAPPassword, [Parameter(Mandatory = $true)] [Alias('F')] [string]$Filter, [Parameter(Mandatory = $true)] [Alias('B')] [string]$Baseline, [Parameter(ParameterSetName = 'Testing')] [Alias('T')] [String]$TestGroup, [Parameter(ParameterSetName = 'Testing')] [Alias('TB')] [String]$TestBranchName ) begin { $PreReq = Test-Prerequisites $RegPath = 'HKLM:\SOFTWARE\PSWCMA' $RegPathAppwiz = 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\PSWCMA' $ModuleVersion = Get-InstalledModule -Name "PSWCMA" | Select-Object -ExpandProperty Version } process { #Set Folder New-Item -Path $Path -ItemType Directory -Force #Secure Password $KeyFile = "$Path\secure.key" $Key = New-Object byte[] 32 [Security.Cryptography.RNGCryptoServiceProvider]::Create().GetBytes($Key) $Key | Out-File $KeyFile $SecureString = ConvertTo-SecureString -AsPlainText $LDAPPassword -Force $SecuredPW = ConvertFrom-SecureString -SecureString $SecureString -Key $Key #Write Configuration Cache New-Item -Path $RegPath -Force New-ItemProperty -Path $RegPath -Name 'FilePath' -Value $Path -PropertyType String -Force New-ItemProperty -Path $RegPath -Name 'Git' -Value $Git -PropertyType String -Force New-ItemProperty -Path $RegPath -Name 'ActiveDirectory' -Value $ActiveDirectory -PropertyType String -Force New-ItemProperty -Path $RegPath -Name 'LDAPUserName' -Value $LDAPUserName -PropertyType String -Force New-ItemProperty -Path $RegPath -Name 'LDAPPassword' -Value $SecuredPW -PropertyType String -Force New-ItemProperty -Path $RegPath -Name 'AdFilter' -Value $Filter -PropertyType String -Force New-ItemProperty -Path $RegPath -Name 'BaseLineConfig' -Value $Baseline -PropertyType String -Force New-ItemProperty -Path $RegPath -Name 'TestGroup' -Value $TestGroup -PropertyType String -Force New-ItemProperty -Path $RegPath -Name 'TestBranchName' -Value $TestBranchName -PropertyType String -Force #Write appwiz data New-Item -Path $RegPathAppwiz -Force New-ItemProperty -Path $RegPathAppwiz -Name 'Comments' -Value 'PowerShell Windows Configuration Management Agent' -PropertyType String -Force New-ItemProperty -Path $RegPathAppwiz -Name 'Contact' -Value 'University of Basel - ITS' -PropertyType String -Force New-ItemProperty -Path $RegPathAppwiz -Name 'DisplayVersion' -Value "$ModuleVersion" -PropertyType String -Force New-ItemProperty -Path $RegPathAppwiz -Name 'NoModify' -Value '1' -PropertyType DWORD -Force New-ItemProperty -Path $RegPathAppwiz -Name 'NoRemove' -Value '1' -PropertyType DWORD -Force New-ItemProperty -Path $RegPathAppwiz -Name 'Publisher' -Value 'University of Basel - ITS' -PropertyType String -Force New-ItemProperty -Path $RegPathAppwiz -Name 'SystemComponent' -Value '0' -PropertyType DWORD -Force New-ItemProperty -Path $RegPathAppwiz -Name 'URLInfoAbout' -Value 'www.unibas.ch' -PropertyType String -Force New-ItemProperty -Path $RegPathAppwiz -Name 'DisplayName' -Value 'PSWCMA' -PropertyType String -Force New-ItemProperty -Path $RegPathAppwiz -Name 'InstallLocation' -Value 'C:\Program Files\WindowsPowerShell\Modules\PSWCMA' -PropertyType String -Force New-ItemProperty -Path $RegPathAppwiz -Name 'UninstallString' -Value '"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -WindowStyle Hidden -command "& {Import-Module PSWCMA; Uninstall-CMAgent}"' -PropertyType String -Force New-ItemProperty -Path $RegPathAppwiz -Name 'DisplayIcon' -Value '%SystemRoot%\System32\SHELL32.dll,238' -PropertyType ExpandString -Force #Install Pre-Reqs if (!$PreReq.WMF) { Write-Error 'WMFVersion is lower than 5' break } if (!$PreReq.Git) { Install-Git } if (!$PreReq.WinRM) { # $NetProfile = Get-NetConnectionProfile # if ($NetProfile.NetworkCategory -eq 'Public') { # Set-NetConnectionProfile -InterfaceIndex $NetProfile.InterfaceIndex -NetworkCategory Private # } # enum NetworkProfile { # Public = 0 # Private = 1 # Domain = 2 # } # $NLMType = [Type]::GetTypeFromCLSID('DCB00C01-570F-4A9B-8D69-199FDBA5723B') # $NetworkListManager = [Activator]::CreateInstance($NLMType) # #1= Connected Networks; 2= Disconnected Networks; 3= All Networks --> https://docs.microsoft.com/en-us/windows/desktop/api/netlistmgr/nf-netlistmgr-inetworklistmanager-getnetworks # $ConnectedNetworks = $NetworkListManager.GetNetworks(1) # If(!$ConnectedNetworks) { # Write-Verbose "There is no network connected. Please connect a network first." # break # } # foreach($ConnectedNetwork in $ConnectedNetworks) { # if($ConnectedNetwork.GetCategory() -eq [NetworkProfile]::Public) { # $ConnectedNetwork.SetCategory([NetworkProfile]::Private) # } # } #Not needed to set connection profile when using "SkipNetworkProfileCheck" Set-WSManQuickConfig -SkipNetworkProfileCheck -Force } if (!(Test-Prerequisites).All) { Write-Error 'There was an error installing the Prequisites' break } try { #Configure local scheduler with Sechedule.Service COM object $TaskProgram = 'powershell' $TaskName = 'Configuration Management Agent' $TaskArgs = '-ExecutionPolicy bypass -NoProfile -NonInteractive -WindowStyle Hidden -command "& {Import-Module PSWCMA; Install-Configurations}"' $Service = New-Object -ComObject("Schedule.Service") $Service.Connect() $RootFolder = $Service.GetFolder("\") $TaskDefinition = $Service.NewTask(0) $TaskDefinition.Settings.Enabled = $true $TaskDefinition.Settings.AllowDemandStart = $true $TaskDefinition.Settings.ExecutionTimeLimit = "PT1H" $TaskDefinition.Settings.RunOnlyIfNetworkAvailable = $true $TaskDefinition.Settings.DisallowStartIfOnBatteries = $false $TaskDefinition.Settings.StopIfGoingOnBatteries = $false $TaskDefinition.Settings.Compatibility = 2 $TaskDefinition.Principal.RunLevel = 1 $Triggers = $TaskDefinition.Triggers.Create(1) $Triggers.Enabled = $true $Triggers.StartBoundary = (Get-Date -Format ("yyyy-MM-ddTHH:MM:ss")) $Triggers.Repetition.Interval = "PT15M" $Triggers.RandomDelay = "PT15M" $Action = $TaskDefinition.Actions.Create(0) $Action.Path = "$TaskProgram" $Action.Arguments = "$TaskArgs" $RootFolder.RegisterTaskDefinition("$TaskName", $TaskDefinition,6,"System", $null, 5) #Configure Scheduler: above Windows 7 - for Windows 7 compatibility reasons, the scheduled task will be created with Schedule.Service COM object <# $Random = Get-Random -Maximum 15 $SchedulerAction = New-ScheduledTaskAction -Execute $TaskProgram -Argument $TaskArgs $SchedulerTrigger = New-ScheduledTaskTrigger -Once -At (Get-Date) -RepetitionInterval (New-TimeSpan -Minutes 15) -RepetitionDuration (New-TimeSpan -Days (365 * 20)) -RandomDelay (New-TimeSpan -Minutes $Random) $SchedulerSettings = New-ScheduledTaskSettingsSet -ExecutionTimeLimit (New-TimeSpan -Hours 1) Register-ScheduledTask -User System -TaskName $TaskName -Action $SchedulerAction -Trigger $SchedulerTrigger -Settings $SchedulerSettings -Force #> } catch { Write-Error -Message $_.Exception.Message Write-Debug "There was an error creating the scheduled task. Please try again" } } end { } } |