DSCResources/MSFT_SPAntivirusSettings/MSFT_SPAntivirusSettings.psm1

function Get-TargetResource
{
    [CmdletBinding()]
    [OutputType([System.Collections.Hashtable])]
    param
    (
        [Parameter(Mandatory = $true)]
        [ValidateSet('Yes')]
        [String]
        $IsSingleInstance,

        [Parameter()]
        [System.Boolean]
        $ScanOnDownload,

        [Parameter()]
        [System.Boolean]
        $ScanOnUpload,

        [Parameter()]
        [System.Boolean]
        $AllowDownloadInfected,

        [Parameter()]
        [System.Boolean]
        $AttemptToClean,

        [Parameter()]
        [System.UInt16]
        $TimeoutDuration,

        [Parameter()]
        [System.UInt16]
        $NumberOfThreads,

        [Parameter()]
        [System.Management.Automation.PSCredential]
        $InstallAccount
    )

    Write-Verbose -Message "Getting antivirus configuration settings"

    $result = Invoke-SPDscCommand -Credential $InstallAccount `
        -Arguments $PSBoundParameters `
        -ScriptBlock {
        $params = $args[0]

        try
        {
            $spFarm = Get-SPFarm
        }
        catch
        {
            Write-Verbose -Message ("No local SharePoint farm was detected. Antivirus " + `
                    "settings will not be applied")
            return @{
                IsSingleInstance      = "Yes"
                # Set the antivirus settings
                AllowDownloadInfected = $false
                ScanOnDownload        = $false
                ScanOnUpload          = $false
                AttemptToClean        = $false
                NumberOfThreads       = 0
                TimeoutDuration       = 0
                InstallAccount        = $params.InstallAccount
            }
        }

        # Get a reference to the Administration WebService
        $admService = Get-SPDscContentService

        return @{
            IsSingleInstance      = "Yes"
            # Set the antivirus settings
            AllowDownloadInfected = $admService.AntivirusSettings.AllowDownload
            ScanOnDownload        = $admService.AntivirusSettings.DownloadScanEnabled
            ScanOnUpload          = $admService.AntivirusSettings.UploadScanEnabled
            AttemptToClean        = $admService.AntivirusSettings.CleaningEnabled
            NumberOfThreads       = $admService.AntivirusSettings.NumberOfThreads
            TimeoutDuration       = $admService.AntivirusSettings.Timeout.TotalSeconds
            InstallAccount        = $params.InstallAccount
        }
    }
    return $result
}

function Set-TargetResource
{
    [CmdletBinding()]
    param
    (
        [Parameter(Mandatory = $true)]
        [ValidateSet('Yes')]
        [String]
        $IsSingleInstance,

        [Parameter()]
        [System.Boolean]
        $ScanOnDownload,

        [Parameter()]
        [System.Boolean]
        $ScanOnUpload,

        [Parameter()]
        [System.Boolean]
        $AllowDownloadInfected,

        [Parameter()]
        [System.Boolean]
        $AttemptToClean,

        [Parameter()]
        [System.UInt16]
        $TimeoutDuration,

        [Parameter()]
        [System.UInt16]
        $NumberOfThreads,

        [Parameter()]
        [System.Management.Automation.PSCredential]
        $InstallAccount
    )

    Write-Verbose -Message "Setting antivirus configuration settings"

    Invoke-SPDscCommand -Credential $InstallAccount `
        -Arguments $PSBoundParameters `
        -ScriptBlock {
        $params = $args[0]

        try
        {
            $spFarm = Get-SPFarm
        }
        catch
        {
            throw "No local SharePoint farm was detected. Antivirus settings will not be applied"
            return
        }

        Write-Verbose -Message "Start update"
        $admService = Get-SPDscContentService

        # Set the antivirus settings
        if ($params.ContainsKey("AllowDownloadInfected"))
        {
            Write-Verbose -Message "Setting Allow Download"
            $admService.AntivirusSettings.AllowDownload = $params.AllowDownloadInfected
        }
        if ($params.ContainsKey("ScanOnDownload"))
        {
            $admService.AntivirusSettings.DownloadScanEnabled = $params.ScanOnDownload
        }
        if ($params.ContainsKey("ScanOnUpload"))
        {
            $admService.AntivirusSettings.UploadScanEnabled = $params.ScanOnUpload
        }
        if ($params.ContainsKey("AttemptToClean"))
        {
            $admService.AntivirusSettings.CleaningEnabled = $params.AttemptToClean
        }
        if ($params.ContainsKey("NumberOfThreads"))
        {
            $admService.AntivirusSettings.NumberOfThreads = $params.NumberOfThreads
        }
        if ($params.ContainsKey("TimeoutDuration"))
        {
            $timespan = New-TimeSpan -Seconds $params.TimeoutDuration
            $admService.AntivirusSettings.Timeout = $timespan
        }
        $admService.Update()
    }
}

function Test-TargetResource
{
    [CmdletBinding()]
    [OutputType([System.Boolean])]
    param
    (
        [Parameter(Mandatory = $true)]
        [ValidateSet('Yes')]
        [String]
        $IsSingleInstance,

        [Parameter()]
        [System.Boolean]
        $ScanOnDownload,

        [Parameter()]
        [System.Boolean]
        $ScanOnUpload,

        [Parameter()]
        [System.Boolean]
        $AllowDownloadInfected,

        [Parameter()]
        [System.Boolean]
        $AttemptToClean,

        [Parameter()]
        [System.UInt16]
        $TimeoutDuration,

        [Parameter()]
        [System.UInt16]
        $NumberOfThreads,

        [Parameter()]
        [System.Management.Automation.PSCredential]
        $InstallAccount
    )

    Write-Verbose -Message "Testing antivirus configuration settings"

    $CurrentValues = Get-TargetResource @PSBoundParameters

    Write-Verbose -Message "Current Values: $(Convert-SPDscHashtableToString -Hashtable $CurrentValues)"
    Write-Verbose -Message "Target Values: $(Convert-SPDscHashtableToString -Hashtable $PSBoundParameters)"

    return Test-SPDscParameterState -CurrentValues $CurrentValues `
        -DesiredValues $PSBoundParameters
}

Export-ModuleMember -Function *-TargetResource