Update powershell/light-workstation-onboarding.ps1
This commit is contained in:
parent
71553e78ec
commit
93122e6939
1 changed files with 204 additions and 0 deletions
|
|
@ -0,0 +1,204 @@
|
||||||
|
#Start WinRM Service
|
||||||
|
Start-Service WinRM -verbose
|
||||||
|
|
||||||
|
#Enable System restore
|
||||||
|
Enable-ComputerRestore -Drive "C:\" -confirm:$false
|
||||||
|
`
|
||||||
|
|
||||||
|
#Enable SMB and ICMP on Windows Firewall
|
||||||
|
Write-host 'Enable SMB and ICMP on Windows Firewall' -ForegroundColor yellow
|
||||||
|
Set-NetFirewallRule -DisplayName "File and Printer Sharing (Echo Request - ICMPv4-In)" -Enabled True
|
||||||
|
Set-NetFirewallRule -DisplayName "File and Printer Sharing (Echo Request - ICMPv4-Out)" -Enabled True
|
||||||
|
Set-NetFirewallRule -DisplayName "File and Printer Sharing (SMB-In)" -Enabled True
|
||||||
|
Set-NetFirewallRule -DisplayName "File and Printer Sharing (SMB-Out)" -Enabled True
|
||||||
|
|
||||||
|
|
||||||
|
`
|
||||||
|
New-Item -ItemType directory -Path C:\support -ErrorAction SilentlyContinue
|
||||||
|
New-Item -ItemType directory -Path C:\support\software -ErrorAction SilentlyContinue
|
||||||
|
New-Item -ItemType directory -Path C:\support\software\AnyDesk -ErrorAction SilentlyContinue
|
||||||
|
|
||||||
|
|
||||||
|
#Enable Unzip Function - updated below
|
||||||
|
#Add-Type -AssemblyName System.IO.Compression.FileSystem -ErrorAction -SilentlyContinue
|
||||||
|
#function unzip {
|
||||||
|
# param( [string]$ziparchive, [string]$extractpath )
|
||||||
|
# [System.IO.Compression.ZipFile]::ExtractToDirectory ( $ziparchive, $extractpath)
|
||||||
|
#}
|
||||||
|
|
||||||
|
|
||||||
|
# Define the paths for the zip file and extraction directory
|
||||||
|
$sourceZip = "c:\support\software\O365_BP_x64.zip"
|
||||||
|
$destinationDir = "c:\support\software\"
|
||||||
|
|
||||||
|
# Ensure the destination directory exists
|
||||||
|
if (-Not (Test-Path $destinationDir)) {
|
||||||
|
New-Item -ItemType Directory -Path $destinationDir
|
||||||
|
}
|
||||||
|
|
||||||
|
# Extract the zip file using Expand-Archive, which handles existing files better than unzip
|
||||||
|
try {
|
||||||
|
Expand-Archive -Path $sourceZip -DestinationPath $destinationDir
|
||||||
|
Write-Output "Extraction completed successfully."
|
||||||
|
} catch {
|
||||||
|
Write-Error "An error occurred during extraction: $_"
|
||||||
|
exit 1
|
||||||
|
}
|
||||||
|
|
||||||
|
# Continue with DISM operations if needed, ensuring to handle errors appropriately
|
||||||
|
try {
|
||||||
|
# Example DISM command (uncomment and modify as necessary)
|
||||||
|
# DISM /Online /Cleanup-Image /RestoreHealth /Source:c:\support\software\O365_BP_x64.iso /LimitAccess
|
||||||
|
} catch {
|
||||||
|
Write-Error "DISM operation failed: $_"
|
||||||
|
exit 1
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
#Disable Windows 10 Fast startup
|
||||||
|
Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager\Power" -Name HiberbootEnabled -Value 0
|
||||||
|
#Set Power Plan to High Performance
|
||||||
|
powercfg.exe -SETACTIVE 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c
|
||||||
|
powercfg -SETACVALUEINDEX 381b4222-f694-41f0-9685-ff5bb260df2e 4f971e89-eebd-4455-a8de-9e59040e7347 5ca83367-6e45-459f-a27b-476b1d01c936 3
|
||||||
|
powercfg -change -standby-timeout-ac 0
|
||||||
|
powercfg -change -hibernate-timeout-ac 0
|
||||||
|
|
||||||
|
|
||||||
|
# Disable display and sleep mode timeouts
|
||||||
|
Function DisableSleepTimeout {
|
||||||
|
Write-Output "Disabling sleep mode timeouts for AC..."
|
||||||
|
powercfg /X standby-timeout-ac 0
|
||||||
|
powercfg -change hibernate-timeout-ac 0
|
||||||
|
}
|
||||||
|
# Hide Taskbar People icon
|
||||||
|
Function HideTaskbarPeopleIcon {
|
||||||
|
Write-Output "Hiding People icon..."
|
||||||
|
If (!(Test-Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People")) {
|
||||||
|
New-Item -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People" | Out-Null
|
||||||
|
}
|
||||||
|
Set-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People" -Name "PeopleBand" -Type DWord -Value 0
|
||||||
|
}
|
||||||
|
|
||||||
|
# Enable NumLock after startup
|
||||||
|
Function EnableNumlock {
|
||||||
|
Write-Output "Enabling NumLock after startup..."
|
||||||
|
If (!(Test-Path "HKU:")) {
|
||||||
|
New-PSDrive -Name HKU -PSProvider Registry -Root HKEY_USERS | Out-Null
|
||||||
|
}
|
||||||
|
Set-ItemProperty -Path "HKU:\.DEFAULT\Control Panel\Keyboard" -Name "InitialKeyboardIndicators" -Type DWord -Value 2147483650
|
||||||
|
Add-Type -AssemblyName System.Windows.Forms
|
||||||
|
If (!([System.Windows.Forms.Control]::IsKeyLocked('NumLock'))) {
|
||||||
|
$wsh = New-Object -ComObject WScript.Shell
|
||||||
|
$wsh.SendKeys('{NUMLOCK}')
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
|
||||||
|
##################
|
||||||
|
# .Net Framework 3.5
|
||||||
|
##################
|
||||||
|
#oldversionEnable-WindowsOptionalFeature -Online -FeatureName "NetFx3"
|
||||||
|
|
||||||
|
dism /online /cleanup-image /scanhealth
|
||||||
|
dism /online /cleanup-image /restorehealth
|
||||||
|
|
||||||
|
####################################################
|
||||||
|
# Install Office 2016 - Office 365 Business Premium
|
||||||
|
####################################################
|
||||||
|
$office = $apps | where-object {$_.displayname -like "*Office 16 Click-to-Run*"}
|
||||||
|
if($null -eq $office){
|
||||||
|
Invoke-RestMethod 'https://biztechsynergy.com.au/software/O365_BP_x64.zip' -Method 'GET' -OutFile "c:\support\software\O365_BP_x64.zip"
|
||||||
|
unzip "c:\support\software\O365_BP_x64.zip" "c:\support\software\office"
|
||||||
|
C:\support\software\office\setup.exe /configure 'C:\support\software\office\configuration.xml'
|
||||||
|
}
|
||||||
|
|
||||||
|
#####################
|
||||||
|
# Install RMM Agent #
|
||||||
|
#####################
|
||||||
|
|
||||||
|
# author: https://github.com/bradhawkins85
|
||||||
|
$innosetup = 'tacticalagent-v2.8.0-windows-amd64.exe'
|
||||||
|
$api = '"https://api.biztechsynergy.xyz"'
|
||||||
|
$clientid = '5'
|
||||||
|
$siteid = '8'
|
||||||
|
$agenttype = '"workstation"'
|
||||||
|
$power = 1
|
||||||
|
$rdp = 1
|
||||||
|
$ping = 1
|
||||||
|
$auth = '"38afc3fe72d5d8e20db10cb1ea9171bebf054bec23c3f11eee1e0f7e01b60ed2"'
|
||||||
|
$downloadlink = 'https://github.com/amidaware/rmmagent/releases/download/v2.8.0/tacticalagent-v2.8.0-windows-amd64.exe'
|
||||||
|
$apilink = $downloadlink.split('/')
|
||||||
|
|
||||||
|
[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
|
||||||
|
|
||||||
|
$serviceName = 'tacticalrmm'
|
||||||
|
If (Get-Service $serviceName -ErrorAction SilentlyContinue) {
|
||||||
|
write-host ('Tactical RMM Is Already Installed')
|
||||||
|
} Else {
|
||||||
|
$OutPath = $env:TMP
|
||||||
|
$output = $innosetup
|
||||||
|
|
||||||
|
$installArgs = @('-m install --api ', "$api", '--client-id', $clientid, '--site-id', $siteid, '--agent-type', "$agenttype", '--auth', "$auth")
|
||||||
|
|
||||||
|
if ($power) {
|
||||||
|
$installArgs += "--power"
|
||||||
|
}
|
||||||
|
|
||||||
|
if ($rdp) {
|
||||||
|
$installArgs += "--rdp"
|
||||||
|
}
|
||||||
|
|
||||||
|
if ($ping) {
|
||||||
|
$installArgs += "--ping"
|
||||||
|
}
|
||||||
|
|
||||||
|
Try
|
||||||
|
{
|
||||||
|
$DefenderStatus = Get-MpComputerStatus | select AntivirusEnabled
|
||||||
|
if ($DefenderStatus -match "True") {
|
||||||
|
Add-MpPreference -ExclusionPath 'C:\Program Files\TacticalAgent\*'
|
||||||
|
Add-MpPreference -ExclusionPath 'C:\Program Files\Mesh Agent\*'
|
||||||
|
Add-MpPreference -ExclusionPath 'C:\ProgramData\TacticalRMM\*'
|
||||||
|
}
|
||||||
|
}
|
||||||
|
Catch {
|
||||||
|
# pass
|
||||||
|
}
|
||||||
|
|
||||||
|
$X = 0
|
||||||
|
do {
|
||||||
|
Write-Output "Waiting for network"
|
||||||
|
Start-Sleep -s 5
|
||||||
|
$X += 1
|
||||||
|
} until(($connectresult = Test-NetConnection $apilink[2] -Port 443 | ? { $_.TcpTestSucceeded }) -or $X -eq 3)
|
||||||
|
|
||||||
|
if ($connectresult.TcpTestSucceeded -eq $true){
|
||||||
|
Try
|
||||||
|
{
|
||||||
|
Invoke-WebRequest -Uri $downloadlink -OutFile $OutPath\$output
|
||||||
|
Start-Process -FilePath $OutPath\$output -ArgumentList ('/VERYSILENT /SUPPRESSMSGBOXES') -Wait
|
||||||
|
write-host ('Extracting...')
|
||||||
|
Start-Sleep -s 5
|
||||||
|
Start-Process -FilePath "C:\Program Files\TacticalAgent\tacticalrmm.exe" -ArgumentList $installArgs -Wait
|
||||||
|
exit 0
|
||||||
|
}
|
||||||
|
Catch
|
||||||
|
{
|
||||||
|
$ErrorMessage = $_.Exception.Message
|
||||||
|
$FailedItem = $_.Exception.ItemName
|
||||||
|
Write-Error -Message "$ErrorMessage $FailedItem"
|
||||||
|
exit 1
|
||||||
|
}
|
||||||
|
Finally
|
||||||
|
{
|
||||||
|
Remove-Item -Path $OutPath\$output
|
||||||
|
}
|
||||||
|
} else {
|
||||||
|
Write-Output "Unable to connect to server"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
|
||||||
|
#END
|
||||||
Loading…
Reference in a new issue