mirror of
https://github.com/EvotecIT/GPOZaurr.git
synced 2026-08-20 07:02:22 +00:00
201 lines
9.8 KiB
PowerShell
201 lines
9.8 KiB
PowerShell
function Invoke-GPOZaurr {
|
|
[alias('Show-GPOZaurr', 'Show-GPO')]
|
|
[cmdletBinding()]
|
|
param(
|
|
[Parameter(Position = 1)][scriptblock] $ExcludeGroupPolicies,
|
|
[string] $FilePath,
|
|
[Parameter(Position = 0)][string[]] $Type,
|
|
[switch] $PassThru,
|
|
[switch] $HideHTML,
|
|
[switch] $HideSteps,
|
|
[switch] $ShowError,
|
|
[switch] $ShowWarning,
|
|
[alias('ForestName')][string] $Forest,
|
|
[string[]] $ExcludeDomains,
|
|
[alias('Domain', 'Domains')][string[]] $IncludeDomains
|
|
)
|
|
Reset-GPOZaurrStatus # This makes sure types are at it's proper status
|
|
|
|
$Script:Reporting = [ordered] @{}
|
|
$Script:Reporting['Version'] = Get-GitHubVersion -Cmdlet 'Invoke-GPOZaurr' -RepositoryOwner 'evotecit' -RepositoryName 'GPOZaurr'
|
|
$Script:Reporting['Settings'] = @{
|
|
ShowError = $ShowError.IsPresent
|
|
ShowWarning = $ShowWarning.IsPresent
|
|
HideSteps = $HideSteps.IsPresent
|
|
}
|
|
Write-Color '[i]', "[GPOZaurr] ", 'Version', ' [Informative] ', $Script:Reporting['Version'] -Color Yellow, DarkGray, Yellow, DarkGray, Magenta
|
|
|
|
# Verify requested types are supported
|
|
$Supported = [System.Collections.Generic.List[string]]::new()
|
|
[Array] $NotSupported = foreach ($T in $Type) {
|
|
if ($T -notin $Script:GPOConfiguration.Keys ) {
|
|
$T
|
|
} else {
|
|
$Supported.Add($T)
|
|
}
|
|
}
|
|
if ($Supported) {
|
|
Write-Color '[i]', "[GPOZaurr] ", 'Supported types', ' [Informative] ', "Chosen by user: ", ($Supported -join ', ') -Color Yellow, DarkGray, Yellow, DarkGray, Yellow, Magenta
|
|
}
|
|
if ($NotSupported) {
|
|
Write-Color '[i]', "[GPOZaurr] ", 'Not supported types', ' [Informative] ', "Following types are not supported: ", ($NotSupported -join ', ') -Color Yellow, DarkGray, Yellow, DarkGray, Yellow, Magenta
|
|
Write-Color '[i]', "[GPOZaurr] ", 'Not supported types', ' [Informative] ', "Please use one/multiple from the list: ", ($Script:GPOConfiguration.Keys -join ', ') -Color Yellow, DarkGray, Yellow, DarkGray, Yellow, Magenta
|
|
return
|
|
}
|
|
$DisplayForest = if ($Forest) { $Forest } else { 'Not defined. Using current one' }
|
|
$DisplayIncludedDomains = if ($IncludeDomains) { $IncludeDomains -join "," } else { 'Not defined. Using all domains of forest' }
|
|
$DisplayExcludedDomains = if ($ExcludeDomains) { $ExcludeDomains -join ',' } else { 'No exclusions provided' }
|
|
Write-Color '[i]', "[GPOZaurr] ", 'Domain Information', ' [Informative] ', "Forest: ", $DisplayForest -Color Yellow, DarkGray, Yellow, DarkGray, Yellow, Magenta
|
|
Write-Color '[i]', "[GPOZaurr] ", 'Domain Information', ' [Informative] ', "Included Domains: ", $DisplayIncludedDomains -Color Yellow, DarkGray, Yellow, DarkGray, Yellow, Magenta
|
|
Write-Color '[i]', "[GPOZaurr] ", 'Domain Information', ' [Informative] ', "Excluded Domains: ", $DisplayExcludedDomains -Color Yellow, DarkGray, Yellow, DarkGray, Yellow, Magenta
|
|
|
|
# Exclusions support, converts ScriptBlock into list of GPOs
|
|
<#
|
|
$Exclusions = [ordered]@{}
|
|
if ($Extension) {
|
|
$Exclusions['All'] = [System.Collections.Generic.List[PSCustomObject]]::new()
|
|
[Array] $ExecuteExtension = & $Extension
|
|
foreach ($Ext in $ExecuteExtension) {
|
|
if ($Ext.Type -eq 'Exclusion') {
|
|
if ($Ext.Type) {
|
|
if (-not $Exclusions[$Ext.Type]) {
|
|
$Exclusions[$Ext.Type] = [System.Collections.Generic.List[PSCustomObject]]::new()
|
|
}
|
|
$Exclusions[$Ext.Type].Add($Ext)
|
|
} else {
|
|
$Exclusions['All'].Add($Ext)
|
|
}
|
|
}
|
|
}
|
|
}
|
|
#>
|
|
|
|
# Lets make sure we only enable those types which are requestd by user
|
|
if ($Type) {
|
|
foreach ($T in $Script:GPOConfiguration.Keys) {
|
|
$Script:GPOConfiguration[$T].Enabled = $false
|
|
}
|
|
# Lets enable all requested ones
|
|
foreach ($T in $Type) {
|
|
$Script:GPOConfiguration[$T].Enabled = $true
|
|
}
|
|
}
|
|
|
|
# Build data
|
|
foreach ($T in $Script:GPOConfiguration.Keys) {
|
|
if ($Script:GPOConfiguration[$T].Enabled -eq $true) {
|
|
$Script:Reporting[$T] = [ordered] @{
|
|
Name = $Script:GPOConfiguration[$T].Name
|
|
ActionRequired = $null
|
|
Data = $null
|
|
Exclusions = $null
|
|
WarningsAndErrors = $null
|
|
Time = $null
|
|
Summary = $null
|
|
Variables = Copy-Dictionary -Dictionary $Script:GPOConfiguration[$T]['Variables']
|
|
}
|
|
if ($Exclusions) {
|
|
$Script:Reporting[$T]['ExclusionsCode'] = $ExcludeGroupPolicies
|
|
$Script:Reporting[$T]['Exclusions'] = & $ExcludeGroupPolicies
|
|
}
|
|
|
|
$TimeLogGPOList = Start-TimeLog
|
|
Write-Color -Text '[i]', '[Start] ', $($Script:GPOConfiguration[$T]['Name']) -Color Yellow, DarkGray, Yellow
|
|
$OutputCommand = Invoke-Command -ScriptBlock $Script:GPOConfiguration[$T]['Execute'] -WarningVariable CommandWarnings -ErrorVariable CommandErrors -ArgumentList $Forest, $ExcludeDomains, $IncludeDomains
|
|
if ($OutputCommand -is [System.Collections.IDictionary]) {
|
|
# in some cases the return will be wrapped in Hashtable/orderedDictionary and we need to handle this without an array
|
|
$Script:Reporting[$T]['Data'] = $OutputCommand
|
|
} else {
|
|
# since sometimes it can be 0 or 1 objects being returned we force it being an array
|
|
$Script:Reporting[$T]['Data'] = [Array] $OutputCommand
|
|
}
|
|
Invoke-Command -ScriptBlock $Script:GPOConfiguration[$T]['Processing']
|
|
$Script:Reporting[$T]['WarningsAndErrors'] = @(
|
|
if ($ShowWarning) {
|
|
foreach ($War in $CommandWarnings) {
|
|
[PSCustomObject] @{
|
|
Type = 'Warning'
|
|
Comment = $War
|
|
Reason = ''
|
|
TargetName = ''
|
|
}
|
|
}
|
|
}
|
|
if ($ShowError) {
|
|
foreach ($Err in $CommandErrors) {
|
|
[PSCustomObject] @{
|
|
Type = 'Error'
|
|
Comment = $Err
|
|
Reason = $Err.CategoryInfo.Reason
|
|
TargetName = $Err.CategoryInfo.TargetName
|
|
}
|
|
}
|
|
}
|
|
)
|
|
#if ($Script:GPOConfiguration[$T]['Summary']) {
|
|
# $Script:Reporting[$T]['Summary'] = Invoke-Command -ScriptBlock $Script:GPOConfiguration[$T]['Summary']
|
|
#}
|
|
$TimeEndGPOList = Stop-TimeLog -Time $TimeLogGPOList -Option OneLiner
|
|
$Script:Reporting[$T]['Time'] = $TimeEndGPOList
|
|
Write-Color -Text '[i]', '[End ] ', $($Script:GPOConfiguration[$T]['Name']), " [Time to execute: $TimeEndGPOList]" -Color Yellow, DarkGray, Yellow, DarkGray
|
|
}
|
|
}
|
|
|
|
# Generate pretty HTML
|
|
$TimeLogHTML = Start-TimeLog
|
|
Write-Color -Text '[i]', '[HTML ] ', 'Generating HTML report' -Color Yellow, DarkGray, Yellow
|
|
New-HTML -Author 'Przemysław Kłys' -TitleText 'GPOZaurr Report' {
|
|
New-HTMLTabStyle -BorderRadius 0px -TextTransform capitalize -BackgroundColorActive SlateGrey
|
|
New-HTMLSectionStyle -BorderRadius 0px -HeaderBackGroundColor Grey -RemoveShadow
|
|
New-HTMLPanelStyle -BorderRadius 0px
|
|
New-HTMLTableOption -DataStore JavaScript -BoolAsString
|
|
|
|
New-HTMLHeader {
|
|
New-HTMLSection -Invisible {
|
|
New-HTMLSection {
|
|
New-HTMLText -Text "Report generated on $(Get-Date)" -Color Blue
|
|
} -JustifyContent flex-start -Invisible
|
|
New-HTMLSection {
|
|
New-HTMLText -Text "GPOZaurr - $($Script:Reporting['Version'])" -Color Blue
|
|
} -JustifyContent flex-end -Invisible
|
|
}
|
|
}
|
|
|
|
if ($Type.Count -eq 1) {
|
|
foreach ($T in $Script:GPOConfiguration.Keys) {
|
|
if ($Script:GPOConfiguration[$T].Enabled -eq $true) {
|
|
if ($Script:GPOConfiguration[$T]['Summary']) {
|
|
$Script:Reporting[$T]['Summary'] = Invoke-Command -ScriptBlock $Script:GPOConfiguration[$T]['Summary']
|
|
}
|
|
& $Script:GPOConfiguration[$T]['Solution']
|
|
}
|
|
}
|
|
} else {
|
|
foreach ($T in $Script:GPOConfiguration.Keys) {
|
|
if ($Script:GPOConfiguration[$T].Enabled -eq $true) {
|
|
if ($Script:GPOConfiguration[$T]['Summary']) {
|
|
$Script:Reporting[$T]['Summary'] = Invoke-Command -ScriptBlock $Script:GPOConfiguration[$T]['Summary']
|
|
}
|
|
New-HTMLTab -Name $Script:GPOConfiguration[$T]['Name'] {
|
|
& $Script:GPOConfiguration[$T]['Solution']
|
|
}
|
|
}
|
|
}
|
|
}
|
|
} -Online -ShowHTML:(-not $HideHTML) -FilePath $FilePath
|
|
$TimeLogEndHTML = Stop-TimeLog -Time $TimeLogHTML -Option OneLiner
|
|
Write-Color -Text '[i]', '[HTML ] ', 'Generating HTML report', " [Time to execute: $TimeLogEndHTML]" -Color Yellow, DarkGray, Yellow, DarkGray
|
|
if ($PassThru) {
|
|
$Script:Reporting
|
|
}
|
|
Reset-GPOZaurrStatus # This makes sure types are at it's proper status
|
|
|
|
}
|
|
|
|
[scriptblock] $SourcesAutoCompleter = {
|
|
param($commandName, $parameterName, $wordToComplete, $commandAst, $fakeBoundParameters)
|
|
|
|
$Script:GPOConfiguration.Keys | Sort-Object | Where-Object { $_ -like "*$wordToComplete*" }
|
|
}
|
|
|
|
Register-ArgumentCompleter -CommandName Invoke-GPOZaurr -ParameterName Type -ScriptBlock $SourcesAutoCompleter |