Added Files

This commit is contained in:
DistractADD
2021-07-06 13:16:46 +10:00
parent f2475a3bdd
commit cfddd4fad2
393 changed files with 65842 additions and 0 deletions

View File

@@ -0,0 +1,357 @@
<#
.SYNOPSIS
Create the S4B Related Exchange UM QoS Group Policy
.DESCRIPTION
Create the Skype for Busines related Exchange Unified Messaging Quality of Services Group Policy
.EXAMPLE
PS C:\> .\ExchangeUM_GPO.ps1
.EXAMPLE
PS C:\> .\ExchangeUM_GPO.ps1 -verbose
.NOTES
Check that the ports and port ranges fit your requirements!
The ports and ranges we use here should fit the Skype for Business Online setup
#>
[CmdletBinding()]
param ()
#Requires -RunAsAdministrator
BEGIN
{
#region Variables
# QoS marking for Audio
$SC = 'SilentlyContinue'
$STP = 'Stop'
[string]$AudioMark = '46'
#endregion Variables
#region GroupPolicyInfo
# GPO (Policy) Name
[string]$PolicyName = 'S4B QoS - Exchange UM'
# GPO (Policy) Comment
[string]$PolicyComment = 'DSCP markings for Exchange UM traffic. This GPO should be applied to all Organizational Units (OUs) containing Exchange UM servers.'
#endregion GroupPolicyInfo
#region Defaults
# Define some Defaults
[string]$MinusOne = '-1'
[string]$OneZero = '1.0'
[string]$One = '1'
[string]$WC = '*'
[string]$ThrotRate = 'Throttle Rate'
[string]$DscpVal = 'DSCP Value'
[string]$RemIPLen = 'Remote IP Prefix Length'
[string]$RemIP = 'Remote IP'
[string]$RemPort = 'Remote Port'
[string]$LocIPLen = 'Local IP Prefix Length'
[string]$LocIP = 'Local IP'
[string]$LocPort = 'Local Port'
[string]$Protocol = 'Protocol'
[string]$AppName = 'Application Name'
[string]$Version = 'Version'
[string]$STRG = 'String'
[string]$UserSettingsDisabled = 'UserSettingsDisabled'
[string]$ServicesTcpipQoSName = 'HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\QoS'
[string]$ServicesTcpipQoSValue = 'Do not use NLA'
[string]$Action = 'Update'
[string]$Context = 'Computer'
#endregion Defaults
#region ModuleHandler
try
{
# List of Modules
$Modules = 'ActiveDirectory', 'GroupPolicy'
# Loop over the Module List
foreach ($Module in $Modules)
{
# Import the Module
Write-Verbose -Message ('Importing {0}' -f $Module)
$null = (Import-Module -Name $Module -ErrorAction $STP -WarningAction $SC)
Write-Verbose -Message ('Imported {0}' -f $Module)
}
}
catch
{
# Whoops
Write-Error -Message ('Unable to import the {0} Module, please check your Setup!' -f $Module) -ErrorAction $STP
# We are done here...
break
}
#endregion ModuleHandler
}
PROCESS
{
#region CreateGroupPolicy
try
{
Write-Verbose -Message ('Try to create {0}' -f $PolicyName)
#Cleanup
$paramNewGPO = $null
# Splat reusable parameters
$paramNewGPO = @{
Name = $PolicyName
Comment = $PolicyComment
ErrorAction = Stop
WarningAction = SilentlyContinue
Confirm = $false
}
$null = (New-GPO @paramNewGPO)
Write-Verbose -Message ('Created {0}' -f $PolicyName)
}
catch
{
Write-Verbose -Message ('The Policy {0} exists' -f $PolicyName)
}
#endregion CreateGroupPolicy
#region ModifyGroupPolicy
try
{
Write-Verbose -Message ('Try to modify {0}' -f $PolicyName)
$null = ((Get-GPO -Name $PolicyName).GpoStatus = $UserSettingsDisabled)
Write-Verbose -Message ('Modified {0}' -f $PolicyName)
}
catch
{
Write-Error -Message ('Unable to modify {0}' -f $PolicyName) -ErrorAction $STP
# We are done here...
break
}
#endregion ModifyGroupPolicy
#region ServicesTcpipQoSName
try
{
Write-Verbose -Message ('Try to Set {0} to {1} {2} in {3}' -f $ServicesTcpipQoSName, $ServicesTcpipQoSValue, $One, $PolicyName)
# Cleanup
$paramSetGPPrefRegistryValue = $null
# Splat reusable parameters
$paramSetGPPrefRegistryValue = @{
Name = $PolicyName
ErrorAction = Stop
WarningAction = SilentlyContinue
Context = $Context
Key = $ServicesTcpipQoSName
ValueName = $ServicesTcpipQoSValue
Value = $One
Type = $STRG
Action = $Action
}
$null = (Set-GPPrefRegistryValue @paramSetGPPrefRegistryValue)
Write-Verbose -Message ('Set {0} to {1} {2} in {3}' -f $ServicesTcpipQoSName, $ServicesTcpipQoSValue, $One, $PolicyName)
}
catch
{
Write-Warning -Message ('Unable to Set {0} to {1} {2} in {3}' -f $ServicesTcpipQoSName, $ServicesTcpipQoSValue, $One, $PolicyName)
}
#endregion ServicesTcpipQoSName
#region EdgeToExchangeAudio
try
{
Write-Verbose -Message ('Try to set Edge to Exchange UM Audio QoS in {0}' -f $PolicyName)
# Cleanup
$paramSetGPRegistryValue = $null
# Splat reusable parameters
$paramSetGPRegistryValue = @{
Name = $PolicyName
ErrorAction = $STP
WarningAction = $SC
Confirm = $false
Key = 'HKLM\SOFTWARE\Policies\Microsoft\Windows\QoS\Edge to Exchange UM Audio QoS'
ValueName = $Version, $AppName, $Protocol, $LocPort, $LocIP, $LocIPLen, $RemPort, $RemIP, $RemIPLen, $DscpVal, $ThrotRate
Type = $STRG
Value = $OneZero, $WC, $WC, '1024:65535', $WC, $WC, $WC, $WC, $WC, $AudioMark, $MinusOne
}
$null = (Set-GPRegistryValue @paramSetGPRegistryValue)
Write-Verbose -Message ('Set Edge to Exchange UM Audio QoS in {0}' -f $PolicyName)
}
catch
{
Write-Warning -Message ('Unable to set Edge to Exchange UM Audio QoS in {0}' -f $PolicyName)
}
#endregion EdgeToExchangeAudio
#region umservices_exe
try
{
Write-Verbose -Message ('Try to set Exchange UM Audio to Edge QoS - umservices.exe in {0}' -f $PolicyName)
# Cleanup
$paramSetGPRegistryValue = $null
# Splat reusable parameters
$paramSetGPRegistryValue = @{
Name = $PolicyName
ErrorAction = $STP
WarningAction = $SC
Confirm = $false
Key = 'HKLM\SOFTWARE\Policies\Microsoft\Windows\QoS\Exchange UM Audio to Edge QoS - umservices.exe'
ValueName = $Version, $AppName, $Protocol, $LocPort, $LocIP, $LocIPLen, $RemPort, $RemIP, $RemIPLen, $DscpVal, $ThrotRate
Type = $STRG
Value = $OneZero, 'umservices.exe', $WC, '', $WC, $WC, $WC, $WC, $WC, $AudioMark, $MinusOne
}
$null = (Set-GPRegistryValue @paramSetGPRegistryValue)
Write-Verbose -Message ('Set Exchange UM Audio to Edge QoS - umservices.exe in {0}' -f $PolicyName)
}
catch
{
Write-Warning -Message ('Unable to set Exchange UM Audio to Edge QoS - umservices.exe in {0}' -f $PolicyName)
}
#endregion umservices_exe
#region Microsoft_Exchange_UM_CallRouter_exe
try
{
Write-Verbose -Message ('Try to set Exchange UM Audio to Edge QoS - Microsoft.Exchange.UM.CallRouter.exe in {0}' -f $PolicyName)
# Cleanup
$paramSetGPRegistryValue = $null
# Splat reusable parameters
$paramSetGPRegistryValue = @{
Name = $PolicyName
ErrorAction = $STP
WarningAction = $SC
Confirm = $false
Key = 'HKLM\SOFTWARE\Policies\Microsoft\Windows\QoS\Exchange UM Audio to Edge QoS - Microsoft.Exchange.UM.CallRouter.exe'
ValueName = $Version, $AppName, $Protocol, $LocPort, $LocIP, $LocIPLen, $RemPort, $RemIP, $RemIPLen, $DscpVal, $ThrotRate
Type = $STRG
Value = $OneZero, 'Microsoft.Exchange.UM.CallRouter.exe', $WC, '', $WC, $WC, $WC, $WC, $WC, $AudioMark, $MinusOne
}
$null = (Set-GPRegistryValue @paramSetGPRegistryValue)
Write-Verbose -Message ('Set Exchange UM Audio to Edge QoS - Microsoft.Exchange.UM.CallRouter.exe in {0}' -f $PolicyName)
}
catch
{
Write-Warning -Message ('Unable to set Exchange UM Audio to Edge QoS - Microsoft.Exchange.UM.CallRouter.exe in {0}' -f $PolicyName)
}
#endregion Microsoft_Exchange_UM_CallRouter_exe
#region umworkerprocess_exe
try
{
Write-Verbose -Message ('Try to set Exchange UM Audio to Edge QoS - umworkerprocess.exe in {0}' -f $PolicyName)
# Cleanup
$paramSetGPRegistryValue = $null
# Splat reusable parameters
$paramSetGPRegistryValue = @{
Name = $PolicyName
ErrorAction = $STP
WarningAction = $SC
Confirm = $false
Key = 'HKLM\SOFTWARE\Policies\Microsoft\Windows\QoS\Exchange UM Audio to Edge QoS - umworkerprocess.exe'
ValueName = $Version, $AppName, $Protocol, $LocPort, $LocIP, $LocIPLen, $RemPort, $RemIP, $RemIPLen, $DscpVal, $ThrotRate
Type = $STRG
Value = $OneZero, 'umworkerprocess.exe', $WC, '', $WC, $WC, $WC, $WC, $WC, $AudioMark, $MinusOne
}
$null = (Set-GPRegistryValue @paramSetGPRegistryValue)
Write-Verbose -Message ('Set Exchange UM Audio to Edge QoS - umworkerprocess.exe in {0}' -f $PolicyName)
}
catch
{
Write-Warning -Message ('Unable to set Exchange UM Audio to Edge QoS - umworkerprocess.exe in {0}' -f $PolicyName)
}
#endregion umworkerprocess_exe
}
END
{
Write-Output -InputObject ('Done with the creation of {0}' -f $PolicyName)
}
#region License
<#
Copyright (c) 2017, Joerg Hochwald. All rights reserved.
Redistribution and use in source and binary forms, with or without
modification, are permitted provided that the following conditions are met:
* Redistributions of source code must retain the above copyright notice, this
list of conditions and the following disclaimer.
* Redistributions in binary form must reproduce the above copyright notice,
this list of conditions and the following disclaimer in the documentation
and/or other materials provided with the distribution.
* Neither the name of the copyright holder nor the names of its
contributors may be used to endorse or promote products derived from
this software without specific prior written permission.
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS"
AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE
DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDER OR CONTRIBUTORS BE LIABLE
FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR
SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER
CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY,
OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
By using the Software, you agree to the License, Terms and Conditions above!
#>
<#
This is a third-party Software!
The developer of this Software is NOT sponsored by or affiliated with Microsoft Corp (MSFT) or any of its subsidiaries in any way
The Software is not supported by Microsoft Corp (MSFT)!
#>
#endregion License