DSCResources/cSpeculationControlAVCompatibility/cSpeculationControlAVCompatibility.psm1

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
$QualityCompatPath = 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\QualityCompat'

Function Get-TargetResource
{
    [OutputType([System.Collections.Hashtable])]
    [CMDLetBinding()]
    param
    (
        # Parameter help description
        [Parameter(Mandatory = $true)]
        [ValidateSet('Enabled')]
        [String]
        $Status
    )

    $getTargetResourceResult = $null

    # Test if the fixes are enabled
    $QualityCompatEnabled = Test-RegistryItem -Path $QualityCompatPath -Name 'cadca5fe-87d3-4b96-b7fb-a231484277cc' -ExpectedValue 0
    Write-Verbose -Message ('AV QualityCompat Flag is {0}' -f $QualityCompatEnabled)

    if ($QualityCompatEnabled)
    {
        $Status = 'Enabled'
    }
    else
    {
        $Status = 'Disabled'
    }

    $getTargetResourceResult = @{
        Status = $Status
    }

    $getTargetResourceResult
}

Function Set-TargetResource
{
    [Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSUseDeclaredVarsMoreThanAssignments', '')]
    [Diagnostics.CodeAnalysis.SuppressMessageAttribute('PSAvoidGlobalVars', '')]
    [CMDLetBinding(SupportsShouldProcess=$true)]
    param
    (
        # Parameter help description
        [Parameter(Mandatory = $true)]
        [ValidateSet('Enabled')]
        [String]
        $Status
    )

    Write-Verbose -Message 'Enabling AV Compatibility'
    if ($PSCmdlet.ShouldProcess('Enable cSpeculationControlFix', 'Set-TargetResource')) {
        Update-RegistryItem -Path $QualityCompatPath -Name 'cadca5fe-87d3-4b96-b7fb-a231484277cc' -Value 0 -PropertyType 'DWORD' -Confirm:$false
    }

    # Setting the global:DSCMachineStatus = 1 tells DSC that a reboot is required
    $global:DSCMachineStatus = 1
}

Function Test-TargetResource
{
    [CMDLetBinding()]
    [OutputType([bool])]
    param
    (
        # Parameter help description
        [Parameter(Mandatory = $true)]
        [ValidateSet('Enabled')]
        [String]
        $Status
    )

    $QualityCompatEnabled = Test-RegistryItem -Path $QualityCompatPath -Name 'cadca5fe-87d3-4b96-b7fb-a231484277cc' -ExpectedValue 0
    Write-Verbose -Message ('AV QualityCompat Flag is {0}' -f $QualityCompatEnabled)

    $QualityCompatEnabled
}