Added from Evernote export
This commit is contained in:
DistractADD
267
Powershell/From Evernote/Intune.ps1
Normal file
267
Powershell/From Evernote/Intune.ps1
Normal file
@@ -0,0 +1,267 @@
|
||||
param([switch]$Elevated)
|
||||
function Check-Admin {
|
||||
$currentUser = New-Object Security.Principal.WindowsPrincipal $([Security.Principal.WindowsIdentity]::GetCurrent())
|
||||
$currentUser.IsInRole([Security.Principal.WindowsBuiltinRole]::Administrator)
|
||||
}
|
||||
if ((Check-Admin) -eq $false) {
|
||||
if ($elevated)
|
||||
{
|
||||
# could not elevate, quit
|
||||
}
|
||||
|
||||
else {
|
||||
|
||||
Start-Process powershell.exe -Verb RunAs -ArgumentList ('-noprofile -noexit -file "{0}" -elevated' -f ($myinvocation.MyCommand.Definition))
|
||||
}
|
||||
exit
|
||||
}
|
||||
function Write-ProgressHelper {
|
||||
param (
|
||||
[int]$StepNumber,
|
||||
[string]$Message
|
||||
)
|
||||
|
||||
Write-Progress -Activity 'PSC Update Readiness 2019' -Status $Message -PercentComplete (($StepNumber / $steps) * 100)
|
||||
}
|
||||
|
||||
$script:steps = ([System.Management.Automation.PsParser]::Tokenize((gc "$PSScriptRoot\$($MyInvocation.MyCommand.Name)"), [ref]$null) | where { $_.Type -eq 'Command' -and $_.Content -eq 'Write-ProgressHelper' }).Count
|
||||
|
||||
$stepCounter = 0
|
||||
|
||||
Write-ProgressHelper -Message 'Checking For Previous Run' -StepNumber ($stepCounter++)
|
||||
Start-Sleep -Seconds 2.5
|
||||
$ErrorActionPreference="SilentlyContinue"
|
||||
$maxRepeat = 10
|
||||
$Organisation = "PSC"
|
||||
$ThisPC = ($env:COMPUTERNAME + $env:username)
|
||||
$freespaceError = ("$env:COMPUTERNAME only has $spacegb GB Free and cannot continue 1903 install")
|
||||
$TeamViewerFileName = "c:\teamviewer_install\TeamviewerHost.msi"
|
||||
$InTuneLog = "c:\InTune_Log\$env:COMPUTERNAME.log"
|
||||
$InTuneFolder = "c:\InTune_Log\*.*"
|
||||
$InTune_Folder = "c:\InTune_Log\"
|
||||
$ts = New-TimeSpan -Hours 2
|
||||
function not-exist { -not (Test-Path -Path $TeamViewerFileName) }
|
||||
#Set-Alias !exist not-exist -Option "Constant, AllScope"
|
||||
#Set-Alias exist Test-Path -Option "Constant, AllScope"
|
||||
Add-Type -AssemblyName System.Windows.Forms | Out-Null
|
||||
Stop-Transcript | out-null
|
||||
$ErrorActionPreference = "Continue"
|
||||
If (-not(Test-Path -Path $InTune_Folder)) {
|
||||
mkdir $InTune_Folder }
|
||||
filter timestamp {"$(Get-Date -Format G): $_"}
|
||||
|
||||
if (Test-Path -Path $InTuneLog) {
|
||||
Remove-Item $InTuneLog -ErrorAction SilentlyContinue
|
||||
Remove-Item $InTune_Folder\$env:COMPUTERNAME.zip -Force -ErrorAction SilentlyContinue
|
||||
Remove-Item c:\InTune_Log\"$env:COMPUTERNAME"_Transcript.log -ErrorAction SilentlyContinue
|
||||
Remove-Item c:\InTune_Log\"$env:COMPUTERNAME".csv -ErrorAction SilentlyContinue
|
||||
Remove-Item c:\InTune_Log\$env:Computername-Bitlocker-Recovery-key.txt -ErrorAction SilentlyContinue
|
||||
Start-Sleep -Seconds 1.5}
|
||||
Else
|
||||
{
|
||||
# Move On
|
||||
}
|
||||
Start-Transcript -path c:\InTune_Log\"$env:COMPUTERNAME"_Transcript.log
|
||||
Write-ProgressHelper -Message 'Checking For Teamviewer' -StepNumber ($stepCounter++)
|
||||
Start-Sleep -Seconds 2.5
|
||||
############################################################################
|
||||
# Teamviewer Start
|
||||
############################################################################
|
||||
#Get Teamviewer
|
||||
if (-not (Test-Path -Path $TeamViewerFileName)) {
|
||||
mkdir c:\teamviewer_install
|
||||
$url = "https://onedrive.live.com/download?cid=77FB0E4F642F10B7&resid=77FB0E4F642F10B7%21273176&authkey=AOouFE3GDGRSHIc"
|
||||
$output = "c:\teamviewer_install\TeamviewerHost.msi"
|
||||
$start_time = Get-Date
|
||||
|
||||
$wc = New-Object System.Net.WebClient
|
||||
$wc.DownloadFile($url, $output)
|
||||
Write-Host "Temaviewer Downloaded"
|
||||
msiexec.exe /i "c:\teamviewer_install\TeamviewerHost.msi" /qn CUSTOMCONFIGID=6988pev APITOKEN=6581446-B1aEz7nIk9k92p4G7C1R ASSIGNMENTOPTIONS="--grant-easy-access"
|
||||
Write-Host "Teamviewer Installed"
|
||||
}
|
||||
Else
|
||||
{
|
||||
Write-Host "TeamViewer Already Installed"
|
||||
}
|
||||
|
||||
#############################################################################
|
||||
# Teamviewer End
|
||||
#############################################################################
|
||||
Write-ProgressHelper -Message 'Checking Your PC Integrity - Integrity Is Important You Know' -StepNumber ($stepCounter++)
|
||||
Start-Sleep -Seconds 5
|
||||
##############################################################################
|
||||
# Computer Sanity Check End
|
||||
##############################################################################
|
||||
|
||||
# Power Connect Check
|
||||
|
||||
#Function Check-BatteryState {
|
||||
#param($Laptop=$env:computername)
|
||||
#$Bstatus = ((Get-WmiObject -Class Win32_Battery).BatteryStatus)
|
||||
#}
|
||||
$Bstatus = ((Get-WmiObject -Class Win32_Battery).BatteryStatus)
|
||||
if($Bstatus) {
|
||||
switch ($Bstatus)
|
||||
{
|
||||
1 { "Battery is discharging" }
|
||||
2 { "The system has access to AC so no battery is being discharged. However, the battery is not necessarily charging." }
|
||||
3 { "Fully Charged" }
|
||||
4 { "Low" }
|
||||
5 { "Critical" }
|
||||
6 { "Charging" }
|
||||
7 { "Charging and High" }
|
||||
8 { "Charging and Low" }
|
||||
9 { "Charging and Critical " }
|
||||
10 { "Unknown State" }
|
||||
11 { "Partially Charged" }
|
||||
|
||||
}
|
||||
}
|
||||
|
||||
If ($BStatus -eq 2) {
|
||||
# Move On
|
||||
}
|
||||
|
||||
Else {
|
||||
[System.Windows.Forms.MessageBox]::Show("You Need To Be Connected To The Power Adapter! Please re run from Software Center when power is avalable. Exiting...", $Organisation,
|
||||
[System.Windows.Forms.MessageBoxButtons]::OK,
|
||||
[System.Windows.Forms.MessageBoxIcon]::ERROR)
|
||||
|
||||
}
|
||||
|
||||
|
||||
# Power Connect Check End
|
||||
#----------------------------------------------------------------------------
|
||||
Write-ProgressHelper -Message 'Checking Your Free Drive Space - You Should Be Saving Everything To The Cloud Anyway' -StepNumber ($stepCounter++)
|
||||
Start-Sleep -Seconds 5
|
||||
|
||||
#----------------------------------------------------------------------------
|
||||
# Free Space Check Start
|
||||
|
||||
$disk = Get-WMIObject Win32_Logicaldisk -filter "deviceid='$((Get-WMIObject Win32_OperatingSystem -computername $env:COMPUTERNAME).systemdrive)'" -ComputerName $env:COMPUTERNAME
|
||||
$freespace = ($disk.FreeSpace)
|
||||
$spacegb = [math]::Round($disk.Freespace/1GB,2)
|
||||
|
||||
# Free Space Check End
|
||||
#----------------------------------------------------------------------------
|
||||
Write-ProgressHelper -Message 'Checking Your PC Is Secure - Safety First!' -StepNumber ($stepCounter++)
|
||||
Start-Sleep -Seconds 5
|
||||
#----------------------------------------------------------------------------
|
||||
# Bitlocker Status
|
||||
Install-PackageProvider -Name NuGet -MinimumVersion 2.8.5.201 -Force
|
||||
$blockerstatus = (Get-BitlockerVolume -MountPoint "C:")
|
||||
|
||||
#----------------------------------------------------------------------------
|
||||
Write-ProgressHelper -Message 'Checking For PSC Admin' -StepNumber ($stepCounter++)
|
||||
Start-Sleep -Seconds 5
|
||||
#----------------------------------------------------------------------------
|
||||
# PSC Admin User Check Start
|
||||
|
||||
|
||||
$UserPassword = ConvertTo-SecureString "Restore99!" -AsPlainText -Force
|
||||
$psclocaladmin = $null
|
||||
If ($psclocaladmin = Get-LocalUser pscadmin)
|
||||
{
|
||||
Add-LocalGroupMember -Group "Administrators" -Member "pscadmin"
|
||||
Enable-LocalUser -Name "pscadmin"
|
||||
}
|
||||
Else
|
||||
{
|
||||
# If (!$psclocaladmin)
|
||||
New-LocalUser "pscadmin" -Password $UserPassword -FullName "PSC Admin" -Description "PSC Admin Account" -AccountNeverExpires -PasswordNeverExpires
|
||||
Add-LocalGroupMember -Group "Administrators" -Member "pscadmin"
|
||||
Enable-LocalUser -Name "pscadmin"
|
||||
}
|
||||
|
||||
|
||||
# PSC Admin User Check End
|
||||
#----------------------------------------------------------------------------
|
||||
Write-ProgressHelper -Message 'Creating Restore Point - We Like To Play It Safe!' -StepNumber ($stepCounter++)
|
||||
Start-Sleep -Seconds 10
|
||||
#----------------------------------------------------------------------------
|
||||
# System Restore Check Start
|
||||
|
||||
Enable-ComputerRestore -Drive "C:\"
|
||||
Checkpoint-Computer -Description "New Intune Setup 2019" -RestorePointType MODIFY_SETTINGS
|
||||
|
||||
# System Restore Check End
|
||||
#----------------------------------------------------------------------------
|
||||
|
||||
##############################################################################
|
||||
# Computer Sanity Check End
|
||||
##############################################################################
|
||||
Write-ProgressHelper -Message 'Checking For Errors - Its Windows 10, As If There Would Be Errors!?' -StepNumber ($stepCounter++)
|
||||
Start-Sleep -Seconds 5
|
||||
|
||||
# Errors
|
||||
|
||||
If($freespace -lt 32212254720 ) {
|
||||
$freespaceError | Format-Table | Out-File -append "c:\InTune_Log\$env:COMPUTERNAME.log" | Write-Output
|
||||
}
|
||||
else {
|
||||
# No Error To See Here, Keep Moving!
|
||||
}
|
||||
|
||||
|
||||
If ($blockerstatus.protectionstatus -ne "On") {
|
||||
Enable-BitLocker -MountPoint C: -UsedSpaceOnly -SkipHardwareTest -RecoveryKeyPath "c:\InTune_Log\" -RecoveryKeyProtector
|
||||
manage-bde -protectors -get c: >> c:\InTune_Log\$env:Computername-Bitlocker-Recovery-key.txt
|
||||
("BitLocker Was Off") | Format-Table | Out-File -append "c:\InTune_Log\$env:COMPUTERNAME.log" | Write-Output
|
||||
|
||||
}
|
||||
Else
|
||||
{
|
||||
manage-bde -protectors -get c: >> c:\InTune_Log\$env:Computername-Bitlocker-Recovery-key.txt
|
||||
}
|
||||
Start-Sleep -Seconds 1.5
|
||||
if ($BStatus -ne 2)
|
||||
{
|
||||
("$env:username Did Not Plug In To Mains") | Format-Table | Out-File -append "c:\InTune_Log\$env:COMPUTERNAME.log" | Write-Output
|
||||
}
|
||||
|
||||
# AutoPilot Hardware Hash
|
||||
Install-Script -Name Get-WindowsAutoPilotInfo -Force
|
||||
Start-Sleep -Seconds 3
|
||||
Get-WindowsAutoPilotInfo.ps1 -append -OutputFile "c:\InTune_Log\$env:COMPUTERNAME.csv"
|
||||
Start-Sleep -Seconds 2.5
|
||||
|
||||
Stop-Transcript
|
||||
|
||||
# Fail
|
||||
$LogsExist = (Test-Path $InTuneLog)
|
||||
Write-ProgressHelper -Message 'Sending Data To PSC IT' -StepNumber ($stepCounter++)
|
||||
Start-Sleep -Seconds 4
|
||||
if (Test-Path $InTuneLog)
|
||||
{
|
||||
$psclocaladmin | Format-Table | Out-File -append "c:\InTune_Log\$env:COMPUTERNAME.log" | Write-Output
|
||||
("BitLocker Was Off, It has now been switched on by InTune Script. Please try again in an hour") | Format-Table | Out-File -append "c:\InTune_Log\$env:COMPUTERNAME.log" | Write-Output
|
||||
Compress-Archive -Path $InTuneFolder -DestinationPath $InTune_Folder\$env:COMPUTERNAME.zip
|
||||
Start-Sleep -Seconds 5
|
||||
Send-MailMessage -from "$env:username<kurt.frohloff@pscconsulting.com>" -to "IT<it@pscconsulting.com>" -Subject "AAD Intune Upgrade Report Fail $env:computername" -Body "$env:COMPUTERNAME InTune Logs" -Attachments "$InTune_Folder\$env:COMPUTERNAME.zip" -SmtpServer "pscconsulting-com.mail.protection.outlook.com"
|
||||
curl "https://onedrive.live.com/download?cid=77FB0E4F642F10B7&resid=77FB0E4F642F10B7%21273301&authkey=AEReiJb0-g1gGqc" -o "$InTune_Folder\sendfile.ps1"
|
||||
Invoke-Expression (($InTune_Folder)+"\sendfile.ps1")
|
||||
Remove-Item $InTune_Folder\sendfile.ps1 -Force -ErrorAction SilentlyContinue
|
||||
[System.Windows.Forms.MessageBox]::Show("The PSC IT Update Readiness Tool Has Completed Its Task. All Details Have Been Sent To PSC IT.", $Organisation,
|
||||
[System.Windows.Forms.MessageBoxButtons]::OK,
|
||||
[System.Windows.Forms.MessageBoxIcon]::INFORMATION)
|
||||
}
|
||||
Else
|
||||
{
|
||||
("BitLocker Was Already On") | Format-Table | Out-File -append "c:\InTune_Log\$env:COMPUTERNAME.log" | Write-Output
|
||||
$psclocaladmin | Format-Table | Out-File -append "c:\InTune_Log\$env:COMPUTERNAME.log" | Write-Output
|
||||
("$env:COMPUTERNAME has $spacegb GB Free") | Format-Table | Out-File -append "c:\InTune_Log\$env:COMPUTERNAME.log" | Write-Output
|
||||
Compress-Archive -Path $InTuneFolder -DestinationPath $InTune_Folder\$env:COMPUTERNAME.zip
|
||||
Start-Sleep -Seconds 5
|
||||
Send-MailMessage -from "$env:username<kurt.frohloff@pscconsulting.com>" -to "IT<it@pscconsulting.com>" -Subject "AAD Intune Upgrade Report Success $env:computername" -Body "$env:COMPUTERNAME InTune Logs" -Attachments "$InTune_Folder\$env:COMPUTERNAME.zip" -SmtpServer "pscconsulting-com.mail.protection.outlook.com"
|
||||
curl "https://onedrive.live.com/download?cid=77FB0E4F642F10B7&resid=77FB0E4F642F10B7%21273301&authkey=AEReiJb0-g1gGqc" -o "$InTune_Folder\sendfile.ps1"
|
||||
Invoke-Expression (($InTune_Folder)+"\sendfile.ps1")
|
||||
Remove-Item $InTune_Folder\sendfile.ps1 -Force -ErrorAction SilentlyContinue
|
||||
|
||||
[System.Windows.Forms.MessageBox]::Show("The PSC IT Update Readiness Tool Has Completed Its Task. All Details Have Been Sent To PSC IT.", $Organisation,
|
||||
[System.Windows.Forms.MessageBoxButtons]::OK,
|
||||
[System.Windows.Forms.MessageBoxIcon]::INFORMATION)
|
||||
}
|
||||
|
||||
Write-ProgressHelper -Message 'Checkup Complete - Thanks For Playing' -StepNumber ($stepCounter++)
|
||||
Start-Sleep -Seconds 3
|
||||
Reference in New Issue
Block a user