Update

2026-08-31 04:37:57 +00:00 · 2020-04-09 19:55:46 +02:00
parent 9a1e445083
commit 7394c7b5cc
7 changed files with 153 additions and 21 deletions
@@ -1,30 +1,31 @@
 function Get-GPOZaurrBackupInformation {
    [cmdletBinding()]
    param(
-        [string] $BackupFolder
+        [string[]] $BackupFolder
    )
    Begin {

    }
    Process {
-        if ($BackupFolder) {
-            if ((Test-Path -LiteralPath "$BackupFolder\manifest.xml")) {
-                [xml] $Xml = Get-Content -LiteralPath "$BackupFolder\manifest.xml"
-                [Array] $BackupInformation = $Xml.Backups.BackupInst | ForEach-Object {
-                    [PSCustomObject] @{
-                        DisplayName      = $_.GPODisplayName.'#cdata-section'
-                        Domain           = $_.GPODomain.'#cdata-section'
-                        Guid             = $_.GPOGUid.'#cdata-section'
-                        DomainGuid       = $_.GPODomainGuid.'#cdata-section'
-                        DomainController = $_.GPODomainController.'#cdata-section'
-                        BackupTime       = $_.BackupTime.'#cdata-section'
-                        ID               = $_.ID.'#cdata-section'
-                        Comment          = $_.Comment.'#cdata-section'
+        foreach ($Folder in $BackupFolder) {
+            if ($Folder) {
+                if ((Test-Path -LiteralPath "$Folder\manifest.xml")) {
+                    [xml] $Xml = Get-Content -LiteralPath "$Folder\manifest.xml"
+                    $Xml.Backups.BackupInst | ForEach-Object {
+                        [PSCustomObject] @{
+                            DisplayName      = $_.GPODisplayName.'#cdata-section'
+                            Domain           = $_.GPODomain.'#cdata-section'
+                            Guid             = $_.GPOGUid.'#cdata-section'
+                            DomainGuid       = $_.GPODomainGuid.'#cdata-section'
+                            DomainController = $_.GPODomainController.'#cdata-section'
+                            BackupTime       = $_.BackupTime.'#cdata-section'
+                            ID               = $_.ID.'#cdata-section'
+                            Comment          = $_.Comment.'#cdata-section'
+                        }
                    }
+                } else {
+                    Write-Warning "Get-GPOZaurrBackupInformation - No backup information available"
                }
-                $BackupInformation
-            } else {
-                Write-Warning "Get-GPOZaurrBackupInformation - No backup information available"
            }
        }
    }
@@ -0,0 +1,81 @@
+function New-GPOZaurrWMI {
+    [cmdletBinding(SupportsShouldProcess)]
+    param(
+        [parameter(Mandatory)][string] $Name,
+        [string] $Description = ' ',
+        [parameter(Mandatory)][string] $Query,
+        [switch] $SkipQueryCheck,
+        [switch] $Force,
+
+        [alias('ForestName')][string] $Forest,
+        [string[]] $ExcludeDomains,
+        [alias('Domain', 'Domains')][string[]] $IncludeDomains,
+        [System.Collections.IDictionary] $ExtendedForestInformation
+    )
+    if (-not $Forest -and -not $ExcludeDomains -and -not $IncludeDomains -and -not $ExtendedForestInformation) {
+        $IncludeDomains = $Env:USERDNSDOMAIN
+    }
+
+    if (-not $SkipQueryCheck) {
+        try {
+            $null = Get-CimInstance -Query $Query -ErrorAction Stop -Verbose:$false
+        } catch {
+            Write-Warning "New-GPOZaurrWMI - Query error $($_.Exception.Message). Terminating."
+            return
+        }
+    }
+
+    $ForestInformation = Get-WinADForestDetails -Forest $Forest -IncludeDomains $IncludeDomains -ExcludeDomains $ExcludeDomains -ExtendedForestInformation $ExtendedForestInformation
+    foreach ($Domain in $ForestInformation.Domains) {
+        $QueryServer = $ForestInformation['QueryServers'][$Domain]['HostName'][0]
+        $DomainInformation = Get-ADDomain -Server $QueryServer
+        $defaultNamingContext = $DomainInformation.DistinguishedName
+        #$defaultNamingContext = (Get-ADRootDSE).defaultnamingcontext
+        [string] $Author = (([ADSI]"LDAP://<SID=$([System.Security.Principal.WindowsIdentity]::GetCurrent().User.Value)>").UserPrincipalName).ToString()
+        [string] $GUID = "{" + ([System.Guid]::NewGuid()) + "}"
+
+        [string] $DistinguishedName = -join ("CN=", $GUID, ",CN=SOM,CN=WMIPolicy,CN=System,", $defaultNamingContext)
+        $CurrentTime = (Get-Date).ToUniversalTime()
+        [string] $CurrentDate = -join (
+            ($CurrentTime.Year).ToString("0000"),
+            ($CurrentTime.Month).ToString("00"),
+            ($CurrentTime.Day).ToString("00"),
+            ($CurrentTime.Hour).ToString("00"),
+            ($CurrentTime.Minute).ToString("00"),
+            ($CurrentTime.Second).ToString("00"),
+            ".",
+            ($CurrentTime.Millisecond * 1000).ToString("000000"),
+            "-000"
+        )
+
+        [Array] $ExistingWmiFilter = Get-GPOZaurrWMI -ExtendedForestInformation $ForestInformation -IncludeDomains $Domain -Name $Name
+        if ($ExistingWmiFilter.Count -eq 0) {
+            [string] $WMIParm2 = -join ("1;3;10;", $Query.Length.ToString(), ";WQL;root\CIMv2;", $Query , ";")
+            $OtherAttributes = @{
+                "msWMI-Name"             = $Name
+                "msWMI-Parm1"            = $Description
+                "msWMI-Parm2"            = $WMIParm2
+                "msWMI-Author"           = $Author
+                "msWMI-ID"               = $GUID
+                "instanceType"           = 4
+                "showInAdvancedViewOnly" = "TRUE"
+                "distinguishedname"      = $DistinguishedName
+                "msWMI-ChangeDate"       = $CurrentDate
+                "msWMI-CreationDate"     = $CurrentDate
+            }
+            $WMIPath = -join ("CN=SOM,CN=WMIPolicy,CN=System,", $defaultNamingContext)
+
+            try {
+                Write-Verbose "New-GPOZaurrWMI - Creating WMI filter $Name in $Domain"
+                New-ADObject -name $GUID -type "msWMI-Som" -Path $WMIPath -OtherAttributes $OtherAttributes -Server $QueryServer
+            } catch {
+                Write-Warning "New-GPOZaurrWMI - Creating GPO filter error $($_.Exception.Message). Terminating."
+                return
+            }
+        } else {
+            foreach ($_ in $ExistingWmiFilter) {
+                Write-Warning "New-GPOZaurrWMI - Skipping creation of GPO because name: $($_.Name) guid: $($_.ID) for $($_.Domain) already exists."
+            }
+        }
+    }
+}
@@ -0,0 +1,33 @@
+function Remove-GPOZaurrWMI {
+    [CmdletBinding(SupportsShouldProcess)]
+    Param (
+        [Guid[]] $Guid,
+        [string[]] $Name,
+
+        [alias('ForestName')][string] $Forest,
+        [string[]] $ExcludeDomains,
+        [alias('Domain', 'Domains')][string[]] $IncludeDomains,
+        [System.Collections.IDictionary] $ExtendedForestInformation
+    )
+    if (-not $Forest -and -not $ExcludeDomains -and -not $IncludeDomains -and -not $ExtendedForestInformation) {
+        $IncludeDomains = $Env:USERDNSDOMAIN
+    }
+    $ForestInformation = Get-WinADForestDetails -Forest $Forest -IncludeDomains $IncludeDomains -ExcludeDomains $ExcludeDomains -ExtendedForestInformation $ExtendedForestInformation
+    foreach ($Domain in $ForestInformation.Domains) {
+        $QueryServer = $ForestInformation['QueryServers'][$Domain]['HostName'][0]
+        [Array] $Objects = @(
+            if ($Guid) {
+                Get-GPOZaurrWMI -Guid $Guid -ExtendedForestInformation $ForestInformation -IncludeDomains $Domain
+            }
+            if ($Name) {
+                Get-GPOZaurrWMI -Name $Name -ExtendedForestInformation $ForestInformation -IncludeDomains $Domain
+            }
+        )
+        $Objects | ForEach-Object -Process {
+            if ($_.DistinguishedName) {
+                Write-Verbose "Remove-GPOZaurrWMI - Removing WMI Filter $($_.DistinguishedName)"
+                Remove-ADObject $_.DistinguishedName -Confirm:$false -Server $QueryServer
+            }
+        }
+    }
+}