Public/Set-RemoteDesktop.ps1
|
<#
.SYNOPSIS Sets a computer's remote desktop settings. .DESCRIPTION Sets a computer's remote desktop settings. .NOTES This function is pulled directly from the real Microsoft Windows Admin Center PowerShell scripts use rights (according to Microsoft): We grant you a non-exclusive, royalty-free right to use, modify, reproduce, and distribute the scripts provided herein. ANY SCRIPTS PROVIDED BY MICROSOFT ARE PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY AND/OR FITNESS OR A PARTICULAR PURPOSE. .ROLE Administrators .PARAMETER AllowRemoteDesktop This parameter is OPTIONAL. TODO .PARAMETER AllowRemoteDesktopWithNLA This parameter is OPTIONAL. TODO .PARAMETER EnableRemoteApp This parameter is OPTIONAL. TODO .EXAMPLE # Open an elevated PowerShell Session, import the module, and - PS C:\Users\zeroadmin> Set-RemoteDesktop -AllowRemoteDesktop #> function Set-RemoteDesktop { param( [Parameter(Mandatory = $False)] [boolean] $AllowRemoteDesktop, [Parameter(Mandatory = $False)] [boolean] $AllowRemoteDesktopWithNLA, [Parameter(Mandatory=$False)] [boolean] $EnableRemoteApp) Import-Module NetSecurity Import-Module Microsoft.PowerShell.Management $regKey1 = 'HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server' $regKey2 = 'HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp' $keyProperty1 = "fDenyTSConnections" $keyProperty2 = "UserAuthentication" $keyProperty3 = "EnableRemoteApp" $keyPropertyValue1 = $(if ($AllowRemoteDesktop -eq $True) { 0 } else { 1 }) $keyPropertyValue2 = $(if ($AllowRemoteDesktopWithNLA -eq $True) { 1 } else { 0 }) $keyPropertyValue3 = $(if ($EnableRemoteApp -eq $True) { 1 } else { 0 }) if (!(Test-Path $regKey1)) { New-Item -Path $regKey1 -Force | Out-Null } New-ItemProperty -Path $regKey1 -Name $keyProperty1 -Value $keyPropertyValue1 -PropertyType DWORD -Force | Out-Null New-ItemProperty -Path $regKey1 -Name $keyProperty3 -Value $keyPropertyValue3 -PropertyType DWORD -Force | Out-Null if (!(Test-Path $regKey2)) { New-Item -Path $regKey2 -Force | Out-Null } New-ItemProperty -Path $regKey2 -Name $keyProperty2 -Value $keyPropertyValue2 -PropertyType DWORD -Force | Out-Null Enable-NetFirewallRule -DisplayGroup 'Remote Desktop' } |