dry.module.ad

0.1.0

scriptblocks/DryAD_SB_JsonGPO_Import.ps1

<#
    This is an AD Config module for use with DryDeploy, or by itself.
    Copyright (C) 2021 Bjørn Henrik Formo (bjornhenrikformo@gmail.com)
    LICENSE: https://raw.githubusercontent.com/bjoernf73/dry.module.ad/main/LICENSE
 
    This program is free software; you can redistribute it and/or modify
    it under the terms of the GNU General Public License as published by
    the Free Software Foundation; either version 2 of the License, or
    (at your option) any later version.
 
    This program is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
    GNU General Public License for more details.
 
    You should have received a copy of the GNU General Public License along
    with this program; if not, write to the Free Software Foundation, Inc.,
    51 Franklin Street, Fifth Floor, Boston, MA 02110-1301 USA.
#>

[ScriptBlock]$DryAD_SB_JsonGPO_Import = {
    [CmdLetBinding()] 
    param (
        [string]
        $Name,

        [string]
        $FileName,

        [string]
        $DomainController,

        [Bool]
        $Force,

        [Bool]
        $DefaultPermissions,

        [HashTable]
        $Replacements
    )
    $Result = @($false, $null, '')
    
    try {
        if(-not($null = get-command -Name 'Import-GroupPolicyToAD' -ErrorAction Ignore)){
            Import-Module -Name 'dry.ad.gpohelper' -Force -ErrorAction 'Stop' | Out-Null
        }
        
        $GPOExistsAlreadyParams = @{
            Name             = $Name
            DomainController = $DomainController
        }
        [Bool]$GPOExistsAlready = Test-GroupPolicyExistenceInAD @GPOExistsAlreadyParams
    
        if ($GPOExistsAlready -and (-not $Force)) {
            $Result[2] = 'GPO exists already and you didn''t -force (no change)'
            $Result[0] = $true
        }
        else {
            $ImportGroupPolicyToADParams = @{
                Name                    = $Name
                FileName                = $FileName
                OverwriteExistingPolicy = $Force
                DefaultPermissions      = $DefaultPermissions
                Replacements            = $Replacements
                PerformBackup           = $Force # If we overwrite, we also perform a backup of the existing GPO
                RemoveLinks             = $true
                DoNotLinkGPO            = $true
            }
            
            Import-GroupPolicyToAD @ImportGroupPolicyToADParams
            $Result[0] = $true
            
            if ($GPOExistsAlready -and $Force) {
                $Result[2] = 'An existing GPO was replaced (original renamed)'
            }
            else {
                $Result[2] = 'The GPO was imported'
            }
        }
        return $Result
    }
    catch {
        $Result[0] = $false
        $Result[1] = $_
        $Result[2] = 'The GPO import failed'
        return $Result    
    }
    finally {
        @('GPOExistsAlreadyParams',
            'ImportGroupPolicyToADParams',
            'GPOExistsAlready'
        ).foreach({
            Remove-Variable -Name $_ -ErrorAction Ignore | Out-Null
        })
    }
}