UMN-SCCM

1.0.4

UMN-SCCM.psm1

###
# Copyright 2017 University of Minnesota, Office of Information Technology

# This program is free software: you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation, either version 3 of the License, or
# (at your option) any later version.

# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.

# You should have received a copy of the GNU General Public License
# along with Foobar. If not, see <http://www.gnu.org/licenses/>.
###
#

function Get-SccmCollectionByComputer{
<#
    .Synopsis
        Get list of Collections a specific computer belongs to

    .DESCRIPTION
        Get list of Collections a specific computer belongs to

    .PARAMETER computer
        Name of computer to get Collections for

    .PARAMETER siteserver
        FQDN of the site server
            
    .PARAMETER sitecode
        SCCM Site Code

    .EXAMPLE
        get-ClientMaintWindow -computer 'test-machine' -sitecode 'sccmsite'
#>

    [CmdletBinding()]
    Param
    (
        [Parameter(Mandatory)]
        [string]$computer,

        [Parameter(Mandatory)]
        [string]$siteserver,

        [Parameter(Mandatory)]
        [string]$sitecode

    )

    Begin{}
    Process{
        (Get-WmiObject -ComputerName $siteserver  -Namespace "root/SMS/site_$sitecode" -Query "SELECT SMS_Collection.* FROM SMS_FullCollectionMembership, SMS_Collection where name = '$computer' and SMS_FullCollectionMembership.CollectionID = SMS_Collection.CollectionID").Name
    }
    End{}
}

function Get-ClientMaintWindow{
<#
    .Synopsis
        Requires SCCM PowerShell cmdlet to convert WMI class to readable schedule
    .DESCRIPTION
        Requires SCCM PowerShell cmdlet to convert WMI class to readable schedule

    .PARAMETER computer
        Name of computer object to be added

    .PARAMETER sitecode
        SCCM Site Code

    .EXAMPLE
        get-ClientMaintWindow -computer 'test-machine' -sitecode 'sccmsite'
#>

    [CmdletBinding()]
    Param
    (
        [Parameter(Mandatory)]
        [string]$computer,

        [Parameter(Mandatory)]
        [string]$sitecode

    )
 
    Begin
    {
        $Future = @()
        $location = $sitecode+":"
        Import-Module "C:\Program Files (x86)\Microsoft Configuration Manager\AdminConsole\bin\ConfigurationManager.psd1" -Force
        Push-Location
        set-location $location # see wiki about creating the PS-Drive in the first place

    }   

    Process
    {
        $wmiClass = Get-WmiObject -query "SELECT * FROM CCM_ServiceWindow " -namespace "root\CCM\Policy\Machine\ActualConfig" -ComputerName $computer
        If ($wmiClass -eq $Null){throw "$VM WMI call failed"}

        Push-Location
        set-location $location # see wiki about creating the PS-Drive in the first place

        $wmiClass.schedules | % {
            $MaintWindow = Convert-CMSchedule -ScheduleString $_
            If ($MaintWindow.Starttime -ge (get-date)){$Future += $MaintWindow}
        }
    } 
       
    End
    {
    
        If ($Future -eq $Null) {Pop-Location;throw "$vm has no future mainteanance windows"}
        Else {$Future |Select-Object -Property HourDuration,StartTime}
        Pop-Location
    }
}

function Get-CMcollectionmembers
{
<#
    .Synopsis
        List individual members of a collection
    .DESCRIPTION
        Uses CIM instance to return name of servers in a collection
    .EXAMPLE
       Get-CMcollectionmembers -siteserver oit-cm-sitesrv -sitecode UM3 -collectionName oit-cds-servers
   
    .PARAMETER collectionName
        Name of SCCM Collection
    .PARAMETER siteserver
        fqdn of siteserver
    .PARAMETER sitecode
        sitecode for SCCM Instance
#>
    
    [CmdletBinding()]
    param
    (
        [Parameter(Mandatory)]
        [string]$collectionName,

        [Parameter(Mandatory)]
        [string]$siteserver,

        [Parameter(Mandatory)]
        [string]$sitecode
    )



    $SMSCollectionMCN = Get-CimInstance -ComputerName $siteserver -namespace "root/SMS/site_$sitecode"  -ClassName SMS_Collection -Filter "Name = '$collectionname'"|select -ExpandProperty memberclassname 
    Get-CimInstance -ComputerName $siteserver -namespace "root/SMS/site_$sitecode"  -ClassName  $SMSCollectionMCN | Select-Object -ExpandProperty name

}

function Get-CMDeploymentTypePath {
    <#
        .SYNOPSIS
            Gets the paths for all deployment types on an application.
        .DESCRIPTION
            Takes in a IResultObject#SMS_Application object and then returns the paths for each deployment type.
        .EXAMPLE
            Get-CMApplication -Name "MyApp" | Get-CMDeploymentTypePath
        .PARAMETER CMApplication
            This is the application returned from the Get-CMApplication cmdlet.
    #>
    [CmdletBinding()]
    param(
        [Parameter(Mandatory=$true, ValueFromPipeline=$true, Position=1)]
        [PSObject]$CMApplication
    )

    begin {
        $ReturnObject = New-Object System.Collections.ArrayList
    }

    process {
        $ApplicationName = $CMApplication.LocalizedDisplayName
        Write-Verbose -Message "Application: $ApplicationName"

        $AppXml = [xml]$CMApplication.SDMPackageXML
        $DeploymentTypes = $AppXml.AppMgmtDigest.DeploymentType
        
        foreach($DeploymentType in $DeploymentTypes) {
            $ReturnType = New-Object PSObject

            $DeploymentTypeName = $DeploymentType.Title.'#text'
            $DeploymentTypeLocation = $DeploymentType.Installer.Contents.Content.Location
            Write-Verbose -Message "Content Location: $DeploymentTypeLocation"

            $ReturnType | Add-Member -MemberType NoteProperty -Name "ApplicationName" -Value $ApplicationName
            $ReturnType | Add-Member -MemberType NoteProperty -Name "DeploymentType" -Value $DeploymentTypeName
            $ReturnType | Add-Member -MemberType NoteProperty -Name "DeploymentTypeLocation" -Value $DeploymentTypeLocation
            $null = $ReturnObject.Add($ReturnType)
        }
    }

    end {
        return $ReturnObject
    }
}

function Get-CMUpdatesPending
{
<#
    .Synopsis
         List updates pending on a particular server
    .DESCRIPTION
        Uses CIM to query what patches the SCCM client knows to be pending .
    .EXAMPLE
        Get-CMUpdatesPending OIT-Kjm-02| select name
    .EXAMPLE
        (Get-CMUpdatesPending OIT-Kjm-02).count
    .PARAMETER computername
        name of computer object
#>
    [CmdletBinding()]
    param 
    (
        [Parameter(Mandatory)]
        [string]$computername
    )
    
    Get-CimInstance -computername $computername -namespace root\ccm\clientsdk -query 'Select * from CCM_SoftwareUpdate'    
}

function Get-PendingReboot {
    <#
        .SYNOPSIS
            Simply returns what possible pending reboots there are on the current machine.

        .DESCRIPTION
            Takes in no values and returns a hashtable of what reboots are pending and which are not.

        .NOTES
            Name: Get-PendingReboot
            Author: Jeff Bolduan
            LASTEDIT: 09/01/2016

            Based on xPendingReboot DSC functions
            https://github.com/PowerShell/xPendingReboot
        .EXAMPLE

    #>
    [CmdletBinding()]
    [OutputType([Hashtable])]
    param(
        
    )

    # Check the Componenet Based Servicing registry location for a pending reboot
    $ComponentBasedServicingKeys = (Get-ChildItem "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing").Name
    if($ComponentBasedServicingKeys) {
        $ComponentBasedServicing = $ComponentBasedServicingKeys.Split("\") -contains "RebootPending"
    } else {
        $ComponentBasedServicing = $false
    }

    $WindowsUpdateKeys = (Get-ChildItem "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update").Name
    if($WindowsUpdateKeys) {
        $WindowsUpdate = $WindowsUpdateKeys.Split("\") -contains "RebootRequired"
    } else {
        $WindowsUpdate = $false
    }

    $PendingFileRename = (Get-ItemProperty -LiteralPath "HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager").PendingFileRenameOperations.Length -gt 0
    $ActiveComputerName = (Get-ItemProperty -LiteralPath "HKLM:\SYSTEM\CurrentControlSet\Control\ComputerName\ActiveComputerName").ComputerName
    $PendingComputerName = (Get-ItemProperty -LiteralPath "HKLM:\SYSTEM\CurrentControlSet\Control\ComputerName\ComputerName").ComputerName
    $PendingComputerRename = $ActiveComputerName -ne $PendingComputerName

    try {
        $CCMClientSDK = Invoke-WmiMethod -Namespace "root\ccm\ClientSDK" -Class "CCM_ClientUtilities" -Name "DetermineIfRebootPending" -ErrorAction Stop
    } catch {
        Write-Warning -Message "Unable to query CCM_ClientUtilities: $_"
    }

    $SCCMSDK = ($CCMClientSDK.ReturnVal -eq 0) -and ($CCMClientSDK.IsHardRebootPending -or $CCMClientSDK.RebootPending)

    return @{
        ComponenetBasedServicing = $ComponentBasedServicing
        WindowsUpdate = $WindowsUpdate
        PendingFileRename = $PendingFileRename
        PendingComputerRename = $PendingComputerRename
        CCMClientSDK = $SCCMSDK
    }
}

function Import-ComputerObjectSCCM
{
    <#
        .Synopsis
            Add computer object to sccm, add to a collection WMI only
        .DESCRIPTION
            Add computer object to sccm, add to a collection and waits to return until the device is in the collection
            Uses direct add and accepts smsbiosGuid or Mac Address.
    
        .PARAMETER computer
            Name of computer object to be added

        .PARAMETER siteserver
            FQDN of the site server

        .PARAMETER smBiosGuid
            If the computer is a vm from VMWARE use Get-SMBiosGuidVmware from our module UMN-VMWare to get the UUID and convert it to smsbiosguild

        .PARAMETER macAddress
            If you don't have the smasbiosguild, you can use the mac address
        
        .PARAMETER CollectionName
            Device Collection to add the computer object to.

        .PARAMETER sitecode
            SCCM Site Code

        .EXAMPLE
            Import-ComputerObjectSCCM -computer $computer -smBiosGUID $smBiosGUID -siteserver "siteserver.mysite.org" - sitecode "Site"
    #>

    [CmdletBinding()]
    Param
    (
        [ValidateNotNullOrEmpty()]
        [string]$computer,

        [ValidateNotNullOrEmpty()]
        [string] $siteserver,

        [Parameter(ParameterSetName='smbios')]
        [string]$smBiosGUID,

        [Parameter(ParameterSetName='mac')][ValidatePattern("([a-zA-Z0-9]{2}:){5}[a-zA-Z0-9]{2}")]
        [string]$macAddress,

        [string]$CollectionName,

        [ValidateNotNullOrEmpty()]
        [string]$siteCode

    )

    Begin
    {
        $namespace = "root\sms\site_$siteCode"
    }
    Process
    {
         ## validate device doesn't already exist, we don't want to over-write
        if ((Get-WmiObject -Query "SELECT * FROM SMS_R_System WHERE Name = '$computer'" -ComputerName $siteserver -Namespace $namespace) -ne $null){throw "machine already exits in sccm"}

        # New computer account information
        $WMIConnection = ([WMIClass]"\\$siteserver\$namespace`:SMS_Site")
        $NewEntry = $WMIConnection.psbase.GetMethodParameters("ImportMachineEntry")
        if ($smBiosGUID){$NewEntry.SMBIOSGUID = $smBiosGUID}
        else{$NewEntry.MACAddress = $macAddress}            
        $NewEntry.NetbiosName = $computer
        $NewEntry.OverwriteExistingRecord = $True
        $Resource = $WMIConnection.psbase.InvokeMethod("ImportMachineEntry",$NewEntry,$null)

        if($CollectionName)
        {
            # validate Collection name
            if ((Get-WmiObject -Query "SELECT * FROM SMS_Collection WHERE CollectionType = 2 AND Name='$CollectionName'" -ComputerName $siteserver -Namespace $namespace) -eq $null){throw "Error -- unable to find collection"}
            #Create the Direct MemberShip Rule
            $NewRule = ([WMIClass]"\\$siteserver\$namespace`:SMS_CollectionRuleDirect").CreateInstance()
            $NewRule.ResourceClassName = "SMS_R_SYSTEM"
            $NewRule.ResourceID = $Resource.ResourceID
            $NewRule.Rulename = $computer

            #Add the newly created machine to collection
            $CollectionQuery = Get-WmiObject -Namespace $namespace -Class 'SMS_Collection' -Filter "Name='$CollectionName'" -ComputerName $siteserver
            $null = $CollectionQuery.AddMemberShipRule($NewRule)
        }

        return $Resource
        
    }
    End
    {
    }
}

function Install-CMupdates
{
<#
    .Synopsis
        Installs pending updates on a targeted server.
    .DESCRIPTION
        Uses WMI calls to initiate updates pending in the CM client. Logs to public\downloads by default.Does not reboot.
    .EXAMPLE
         install-cmupdates oit-kjm-02
       .PARAMETER computername
        name of computer object
#>
    [CmdletBinding()]
    param 
    (
        [Parameter(Mandatory)]
        [string]$computername,

        [string]$ScriptDir = 'c:\users\public\downloads'
    )

    # Props for this section to Eswar Koneti, original script https://gallery.technet.microsoft.com/SCCM-Configmgr-Powershell-ebbb2c0e

    # Determine script location
        $log      = "$ScriptDir\InstallUpdates.log"
        $date     = Get-Date -Format "dd-MM-yyyy hh:mm:ss"
    #check wmi
        $wmicheck=$null
        $wmicheck =Get-WmiObject -ComputerName $computername -namespace root\cimv2 -Class Win32_BIOS -ErrorAction SilentlyContinue
        if ($wmicheck)
        {
    # Get list of all instances of CCM_SoftwareUpdate from root\CCM\ClientSDK for missing updates https://msdn.microsoft.com/en-us/library/jj155450.aspx?f=255&MSPPError=-2147217396
        $TargetedUpdates= Get-WmiObject -ComputerName $computername -Namespace root\CCM\ClientSDK -Class CCM_SoftwareUpdate -Filter ComplianceState=0
        $approvedUpdates= ($TargetedUpdates |Measure-Object).count
        $pendingpatches=($TargetedUpdates |Where-Object {$TargetedUpdates.EvaluationState -ne 8} |Measure-Object).count
        $rebootpending=($TargetedUpdates |Where-Object {$TargetedUpdates.EvaluationState -eq 8} |Measure-Object).count
        if ($pendingpatches -gt 0) 
        {
          try {
            $MissingUpdatesReformatted = @($TargetedUpdates | ForEach-Object {if($_.ComplianceState -eq 0){[WMI]$_.__PATH}}) 
            # The following is the invoke of the CCM_SoftwareUpdatesManager.InstallUpdates with our found updates
            $InstallReturn = Invoke-WmiMethod -ComputerName $computername -Class CCM_SoftwareUpdatesManager -Name InstallUpdates -ArgumentList (,$MissingUpdatesReformatted) -Namespace root\ccm\clientsdk 
            "$computername,Targeted Patches :$approvedUpdates,Pending patches:$pendingpatches,Reboot Pending patches :$rebootpending,initiated $pendingpatches patches for install"  | Out-File $log -append
              }
            catch {"$computername,pending patches - $pendingpatches but unable to install them ,please check Further" | Out-File $log -append }
        }
        else {"$computername,Targeted Patches :$approvedUpdates,Pending patches:$pendingpatches,Reboot Pending patches :$rebootpending,Compliant" | Out-File $log -append }
        }
        else {"$computername,Unable to connect to remote system ,please check further" | Out-File $log -append }
}

function Install-CMupdatesByCollection
{
<#
    .Synopsis
       Install all pending updates on a set of computers.
    .DESCRIPTION
        Queries SCCM collection to obtain list of servers and then uses WMI to initiate pending SCCM delivered updates on each computer.
        Logs to public\downloads by default.Does not reboot.
    .EXAMPLE
         Install-CMupdatesByCollection -collectionName oitserverkjmtesting -siteserver oit-cm-sitesrv -sitecode UM3
  
    .PARAMETER collectionName
        Name of SCCM Collection
    .PARAMETER siteserver
        fqdn of siteserver
    .PARAMETER sitecode
        sitecode for SCCM Instance
    .PARAMETERScriptDir
#>
    param
    (
        [Parameter(Mandatory)]
        [string]$CollectionName,

        [Parameter(Mandatory)]
        [string]$siteserver,

        [Parameter(Mandatory)]
        [string]$sitecode,

        [string]$ScriptDir = 'c:\users\public\downloads'
    )

    Begin{
        # Determine script location
        $log      = "$ScriptDir\InstallUpdates.log"
        $date     = Get-Date -Format "dd-MM-yyyy hh:mm:ss"
        # Get list of clients from CM collection
    }

    Process{
        $list = get-CMcollectionmembers -collectionName $collectionName -sitecode $sitecode -siteserver $siteserver

        ForEach ($computername in $list)
        {
                $wmicheck=$null
            $wmicheck =Get-WmiObject -ComputerName $computername -namespace root\cimv2 -Class Win32_BIOS -ErrorAction SilentlyContinue
            if ($wmicheck)
            {
            # Get list of all instances of CCM_SoftwareUpdate from root\CCM\ClientSDK for missing updates https://msdn.microsoft.com/en-us/library/jj155450.aspx?f=255&MSPPError=-2147217396
            $TargetedUpdates= Get-WmiObject -ComputerName $computername -Namespace root\CCM\ClientSDK -Class CCM_SoftwareUpdate -Filter ComplianceState=0
            $approvedUpdates= ($TargetedUpdates |Measure-Object).count
            $pendingpatches=($TargetedUpdates |Where-Object {$TargetedUpdates.EvaluationState -ne 8} |Measure-Object).count
            $rebootpending=($TargetedUpdates |Where-Object {$TargetedUpdates.EvaluationState -eq 8} |Measure-Object).count
            if ($pendingpatches -gt 0) 
            {
              try {
                $MissingUpdatesReformatted = @($TargetedUpdates | ForEach-Object {if($_.ComplianceState -eq 0){[WMI]$_.__PATH}}) 
                # The following is the invoke of the CCM_SoftwareUpdatesManager.InstallUpdates with our found updates
                $InstallReturn = Invoke-WmiMethod -ComputerName $computername -Class CCM_SoftwareUpdatesManager -Name InstallUpdates -ArgumentList (,$MissingUpdatesReformatted) -Namespace root\ccm\clientsdk 
                "$computername,Targeted Patches :$approvedUpdates,Pending patches:$pendingpatches,Reboot Pending patches :$rebootpending,initiated $pendingpatches patches for install"  | Out-File $log -append
                  }
            catch {"$computername,pending patches - $pendingpatches but unable to install them ,please check Further" | Out-File $log -append }
            }
            else {"$computername,Targeted Patches :$approvedUpdates,Pending patches:$pendingpatches,Reboot Pending patches :$rebootpending,Compliant" | Out-File $log -append }
            }
            else {"$computername,Unable to connect to remote system ,please check further" | Out-File $log -append }

        }
    }
    End{}
}

function New-ComputerObjectSCCM
{
    <#
        .Synopsis
            Add computer object to sccm, add to a collection
        .DESCRIPTION
            Add computer object to sccm, add to a collection and waits to return until the device is in the collection
            Uses direct add and accepts smsbiosGuid or Mac Address.
    
        .PARAMETER computer
            Name of computer object to be added

        .PARAMETER siteserver
            FQDN of the site server

        .PARAMETER smBiosGuid
            If the computer is a vm from VMWARE use Get-SMBiosGuidVmware from our module UMN-VMWare to get the UUID and convert it to smsbiosguild

        .PARAMETER macAddress
            If you don't have the smasbiosguild, you can use the mac address
        
        .PARAMETER CollectionName
            Device Collection to add the computer object to.

        .PARAMETER sitecode
            SCCM Site Code

        .EXAMPLE
            New-ComputerObjectSCCM -computer $computer -smBiosGUID $smBiosGUID -siteserver "siteserver.mysite.org" - sitecode "Site"
    #>

    [CmdletBinding()]
    Param
    (
        [ValidateNotNullOrEmpty()]
        [string]$computer,

        [ValidateNotNullOrEmpty()]
        [string] $siteserver,

        [Parameter(ParameterSetName='smbios')]
        [string]$smBiosGUID,

        [Parameter(ParameterSetName='mac')][ValidatePattern("([a-zA-Z0-9]{2}:){5}[a-zA-Z0-9]{2}")]
        [string]$macAddress,

        [string]$CollectionName,

        [ValidateNotNullOrEmpty()]
        [string] $sitecode

    )

    Begin
    {
        $namespace = "root\sms\site_$siteCode"
    }
    Process
    {
        if ($smBiosGUID){$null = Import-ComputerObjectSCCM -computer $computer -siteserver $siteserver -CollectionName $CollectionName -siteCode $siteCode -smBiosGUID $smBiosGUID}
        else{$null = Import-ComputerObjectSCCM -computer $computer -siteserver $siteserver -CollectionName $CollectionName -siteCode $siteCode -MacAddress $macAddress}
        
        if ($CollectionName)
        {
            "Waiting for object to show up in collection"
            # Right now the lag on colleciton refresh is around 5 minutes, loop to wait until the computer object finally shows up in the collection
            # hour cap, after that .. error
            $count = 0
                                do {
            start-sleep 60
            $count++
            $device = Get-WmiObject -Query "SELECT * FROM SMS_FullCollectionMembership WHERE CollectionID='SMS00001' AND name='$computer'" -ComputerName $siteserver -Namespace $namespace
            "check $count"
        } while ($device -eq $null -and $count -lt 60)
            if ($device -eq $null){Throw "$computer never added to All Systmes"}
            "Found in All Systems, moving to $CollectionName"

            # Force collection updates.
            $CollectionQueryAllS = Get-WmiObject -Namespace "Root\SMS\Site_$sitecode" -Class SMS_Collection -Filter "Name='$CollectionName'" -computername $siteserver
            $null = $CollectionQueryAllS.RequestRefresh()
            $colID = $CollectionQueryAllS.CollectionID
            $count = 0
                                    do {
            start-sleep 60
            $count++
            #if (($count % 5) -eq 0){"Refreshing $CollectionName";$null = $CollectionQueryAllS.RequestRefresh()}
            $device = Get-WmiObject -Query "SELECT * FROM SMS_FullCollectionMembership WHERE CollectionID='$colID' AND name='$computer'" -ComputerName $siteserver -Namespace $namespace
            "check $count"
        } while ($device -eq $null -and $count -lt 60)
            if ($device -eq $null){Throw "$computer never added to $CollectionName"}
        }
    }
    End
    {
    }
}

function New-ComputerVariablesSCCM
{
    <#
        .Synopsis
            Add variables to a computer object in SCCM
        .DESCRIPTION
            Add variables to a computer object in SCCM
    
        .PARAMETER computer
            Name of computer object to be added

        .PARAMETER deviceVariables
            Hastable of variable to add. Key = variable name, Value = Value of the variable
        
        .PARAMETER CollectionName
            Device Collection to search for computer object, defaults to "All Systems"

        .PARAMETER sitecode
            SCCM Site Code

        .EXAMPLE
            Example of how to use this cmdlet
    #>

    [CmdletBinding()]
    Param
    (
        [ValidateNotNullOrEmpty()]
        [string]$computer,

        [ValidateNotNullOrEmpty()]
        [System.Collections.Hashtable]$deviceVariables,
        
        [ValidateNotNullOrEmpty()]
        [string]$siteserver,

        [ValidateNotNullOrEmpty()]
        [string]$sitecode,

        [string]$smBiosGUID

    )

    Begin
    {
        $namespace = "root\sms\site_$siteCode"
    }
    Process
    {
        try
        {
            $machineSettings = [WMIClass]"\\$siteserver\$namespace`:SMS_MachineSettings"
            $ResourceID = (Get-WmiObject -ComputerName $siteserver -Namespace $namespace -Query "SELECT * FROM SMS_R_System where Name='$computer'").ResourceID
            if ($ResourceID.Count -ne 1){Throw "SCCM returned more/less that one record for $computer : $($ResourceID.Count) records" }
            $object =  $machineSettings.CreateInstance()
            $object.psbase.properties["ResourceID"].value = $ResourceID[0]
            $object.psbase.properties["SourceSite"].value = $SiteCode

            ForEach ($key in $deviceVariables.Keys){
                $object.MachineVariables = $object.MachineVariables + [WMIClass]"\\$siteserver\$namespace`:SMS_MachineVariable"
            }
            $machineVariables =  $object.MachineVariables
            $count = 0
            ForEach ($key in $deviceVariables.Keys){
                $machineVariables[$count].name = $key
                $machineVariables[$count].value = $deviceVariables[$key]
                $count++
            }


            $object.MachineVariables = $machineVariables

            $object.put()
        }catch{Throw ($_.Exception.Message + $_.InvocationInfo.Line + $_.InvocationInfo.PositionMessage)}
    }
    End
    {

    }
}

function Remove-sccmDevice
{
    <#
        .Synopsis
            Remove computer object from SCCM
        .DESCRIPTION
            Remove computer object from SCCM
        .EXAMPLE
            Example of how to use this cmdlet
        .EXAMPLE
            Another example of how to use this cmdlet
    #>

    [CmdletBinding()]
    Param
    (
        [Parameter(Mandatory)]
        [string]$computer,

        [Parameter(Mandatory)]
        [string]$sitecode

    )

    Begin
    {
        $location = $sitecode+":"
        Push-Location
        Import-Module "C:\Program Files (x86)\Microsoft Configuration Manager\AdminConsole\bin\ConfigurationManager.psd1" -Force
        set-location $location # see wiki about creating the PS-Drive in the first place
    }
    Process
    {
        try{Remove-CMDevice -DeviceName $computer -Force}
        catch{Pop-Location;throw ($_.Exception.Message + $_.InvocationInfo.Line + $_.InvocationInfo.PositionMessage)}
    }
    End
    {
        Pop-Location
    }
}

function Remove-sccmDeviceFromCollection
{
    <#
        .Synopsis
            Remove Computer Object from specific device collection
        .DESCRIPTION
            Remove Computer Object from specific device collection
        .EXAMPLE
            Example of how to use this cmdlet
        .EXAMPLE
            Another example of how to use this cmdlet
    #>

    [CmdletBinding()]
    Param
    (
        [ValidateNotNullOrEmpty()]
        [string]$computer,

        [ValidateNotNullOrEmpty()]
        [string]$sitecode,

        [ValidateNotNullOrEmpty()]
        [string]$siteserver,

        [ValidateNotNullOrEmpty()]
        [string]$colName
    )

    Begin
    {
        $location = $sitecode+":"
        Push-Location
        Import-Module "C:\Program Files (x86)\Microsoft Configuration Manager\AdminConsole\bin\ConfigurationManager.psd1" -Force
        set-location $location # see wiki about creating the PS-Drive in the first place
    }
    Process
    {
        ## sccm is case sensative but -mathc is not so ... yeah. Fetch list of vms, match and remove with valid case
        $found = $false
        ## Fetch list of vms
        $rules = Get-CMDeviceCollectionDirectMembershipRule -CollectionName $colName
        foreach ($rule in $rules)
        {
            if($rule.RuleName -match $computer)
            {
                $found = $true
                Remove-CMDeviceCollectionDirectMembershipRule -CollectionName $colName -ResourceName $rule.RuleName -Confirm:$false -Force
                Start-Sleep -Seconds 5
                $CollectionQueryAllS = Get-WmiObject -Namespace "Root\SMS\Site_$sitecode" -Class SMS_Collection -Filter "Name='$colName'" -computername $siteserver
                $null = $CollectionQueryAllS.RequestRefresh()
                break
            }
        }
        if (!($found)){Pop-Location;return (throw "Failed to find $computer in $colName" )}
        else
        {
            ## neither success nor failure seems to return anything, so have to rerun and make sure no match.
            $rules = Get-CMDeviceCollectionDirectMembershipRule -CollectionName $colName
            foreach ($rule in $rules)
            {
                if($rule.RuleName -match $computer){Pop-Location;return (throw "$computer NOT removed from $colName")}
            }
            $true
        }
        
    }
    End
    {
        Pop-Location
    }
}

Export-ModuleMember -Function *