Dmitry Nefedov
4 years ago
5 changed files with 0 additions and 1312 deletions
@ -1,555 +0,0 @@ |
|||||
#requires -Version 2.0 |
|
||||
|
|
||||
$scriptRoot = Split-Path $MyInvocation.MyCommand.Path |
|
||||
. "$scriptRoot\Common.ps1" |
|
||||
|
|
||||
<# |
|
||||
.SYNOPSIS |
|
||||
Creates or modifies a value in a .pol file. |
|
||||
.DESCRIPTION |
|
||||
Creates or modifies a value in a .pol file. By default, also updates the version number in the policy's gpt.ini file. |
|
||||
.PARAMETER Path |
|
||||
Path to the .pol file that is to be modified. |
|
||||
.PARAMETER Key |
|
||||
The registry key inside the .pol file that you want to modify. |
|
||||
.PARAMETER ValueName |
|
||||
The name of the registry value. May be set to an empty string to modify the default value of a key. |
|
||||
.PARAMETER Data |
|
||||
The new value to assign to the registry key / value. Cannot be $null, but can be set to an empty string or empty array. |
|
||||
.PARAMETER Type |
|
||||
The type of registry value to set in the policy file. Cannot be set to Unknown or None, but all other values of the RegistryValueKind enum are legal. |
|
||||
.PARAMETER NoGptIniUpdate |
|
||||
When this switch is used, the command will not attempt to update the version number in the gpt.ini file |
|
||||
.EXAMPLE |
|
||||
Set-PolicyFileEntry -Path $env:systemroot\system32\GroupPolicy\Machine\registry.pol -Key Software\Policies\Something -ValueName SomeValue -Data 'Hello, World!' -Type String |
|
||||
|
|
||||
Assigns a value of 'Hello, World!' to the String value Software\Policies\Something\SomeValue in the local computer Machine GPO. Updates the Machine version counter in $env:systemroot\system32\GroupPolicy\gpt.ini |
|
||||
.EXAMPLE |
|
||||
Set-PolicyFileEntry -Path $env:systemroot\system32\GroupPolicy\Machine\registry.pol -Key Software\Policies\Something -ValueName SomeValue -Data 'Hello, World!' -Type String -NoGptIniUpdate |
|
||||
|
|
||||
Same as example 1, except this one does not update gpt.ini right away. This can be useful if you want to set multiple |
|
||||
values in the policy file and only trigger a single Group Policy refresh. |
|
||||
.EXAMPLE |
|
||||
Set-PolicyFileEntry -Path $env:systemroot\system32\GroupPolicy\Machine\registry.pol -Key Software\Policies\Something -ValueName SomeValue -Data '0x12345' -Type DWord |
|
||||
|
|
||||
Example demonstrating that strings with valid numeric data (including hexadecimal strings beginning with 0x) can be assigned to the numeric types DWord, QWord and Binary. |
|
||||
.EXAMPLE |
|
||||
$entries = @( |
|
||||
New-Object psobject -Property @{ ValueName = 'MaxXResolution'; Data = 1680 } |
|
||||
New-Object psobject -Property @{ ValueName = 'MaxYResolution'; Data = 1050 } |
|
||||
) |
|
||||
|
|
||||
$entries | Set-PolicyFileEntry -Path $env:SystemRoot\system32\GroupPolicy\Machine\registry.pol ` |
|
||||
-Key 'SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services' ` |
|
||||
-Type DWord |
|
||||
|
|
||||
Example of using pipeline input to set multiple values at once. The advantage to this approach is that the |
|
||||
.pol file on disk (and the GPT.ini file) will be updated if _any_ of the specified settings had to be modified, |
|
||||
and will be left alone if the file already contained all of the correct values. |
|
||||
|
|
||||
The Key and Type properties could have also been specified via the pipeline objects instead of on the command line, |
|
||||
but since both values shared the same Key and Type, this example shows that you can pass the values in either way. |
|
||||
.INPUTS |
|
||||
The Key, ValueName, Data, and Type properties may be bound via the pipeline by property name. |
|
||||
.OUTPUTS |
|
||||
None. This command does not generate output. |
|
||||
.NOTES |
|
||||
If the specified policy file already contains the correct value, the file will not be modified, and the gpt.ini file will not be updated. |
|
||||
.LINK |
|
||||
Get-PolicyFileEntry |
|
||||
.LINK |
|
||||
Remove-PolicyFileEntry |
|
||||
.LINK |
|
||||
Update-GptIniVersion |
|
||||
.LINK |
|
||||
about_RegistryValuesForAdminTemplates |
|
||||
#> |
|
||||
|
|
||||
function Set-PolicyFileEntry |
|
||||
{ |
|
||||
[CmdletBinding(SupportsShouldProcess = $true)] |
|
||||
param ( |
|
||||
[Parameter(Mandatory = $true, Position = 0)] |
|
||||
[string] $Path, |
|
||||
|
|
||||
[Parameter(Mandatory = $true, Position = 1, ValueFromPipelineByPropertyName = $true)] |
|
||||
[string] $Key, |
|
||||
|
|
||||
[Parameter(Mandatory = $true, Position = 2, ValueFromPipelineByPropertyName = $true)] |
|
||||
[AllowEmptyString()] |
|
||||
[string] $ValueName, |
|
||||
|
|
||||
[Parameter(Mandatory = $true, Position = 3, ValueFromPipelineByPropertyName = $true)] |
|
||||
[AllowEmptyString()] |
|
||||
[AllowEmptyCollection()] |
|
||||
[object] $Data, |
|
||||
|
|
||||
[Parameter(ValueFromPipelineByPropertyName = $true)] |
|
||||
[ValidateScript({ |
|
||||
if ($_ -eq [Microsoft.Win32.RegistryValueKind]::Unknown) |
|
||||
{ |
|
||||
throw 'Unknown is not a valid value for the Type parameter' |
|
||||
} |
|
||||
|
|
||||
if ($_ -eq [Microsoft.Win32.RegistryValueKind]::None) |
|
||||
{ |
|
||||
throw 'None is not a valid value for the Type parameter' |
|
||||
} |
|
||||
|
|
||||
return $true |
|
||||
})] |
|
||||
[Microsoft.Win32.RegistryValueKind] $Type = [Microsoft.Win32.RegistryValueKind]::String, |
|
||||
|
|
||||
[switch] $NoGptIniUpdate |
|
||||
) |
|
||||
|
|
||||
begin |
|
||||
{ |
|
||||
if (Get-Command [G]et-CallerPreference -CommandType Function -Module PreferenceVariables) |
|
||||
{ |
|
||||
Get-CallerPreference -Cmdlet $PSCmdlet -SessionState $ExecutionContext.SessionState |
|
||||
} |
|
||||
|
|
||||
$dirty = $false |
|
||||
|
|
||||
try |
|
||||
{ |
|
||||
$policyFile = OpenPolicyFile -Path $Path -ErrorAction Stop |
|
||||
} |
|
||||
catch |
|
||||
{ |
|
||||
$PSCmdlet.ThrowTerminatingError($_) |
|
||||
} |
|
||||
} |
|
||||
|
|
||||
process |
|
||||
{ |
|
||||
$existingEntry = $policyFile.GetValue($Key, $ValueName) |
|
||||
|
|
||||
if ($null -ne $existingEntry -and $Type -eq (PolEntryTypeToRegistryValueKind $existingEntry.Type)) |
|
||||
{ |
|
||||
$existingData = GetEntryData -Entry $existingEntry -Type $Type |
|
||||
if (DataIsEqual $Data $existingData -Type $Type) |
|
||||
{ |
|
||||
Write-Verbose "Policy setting '$Key\$ValueName' is already set to '$Data' of type '$Type'." |
|
||||
return |
|
||||
} |
|
||||
} |
|
||||
|
|
||||
Write-Verbose "Configuring '$Key\$ValueName' to value '$Data' of type '$Type'." |
|
||||
|
|
||||
try |
|
||||
{ |
|
||||
switch ($Type) |
|
||||
{ |
|
||||
([Microsoft.Win32.RegistryValueKind]::Binary) |
|
||||
{ |
|
||||
$bytes = $Data -as [byte[]] |
|
||||
if ($null -eq $bytes) |
|
||||
{ |
|
||||
$errorRecord = InvalidDataTypeCombinationErrorRecord -Message 'When -Type is set to Binary, -Data must be passed a Byte[] array.' |
|
||||
$PSCmdlet.ThrowTerminatingError($errorRecord) |
|
||||
} |
|
||||
else |
|
||||
{ |
|
||||
$policyFile.SetBinaryValue($Key, $ValueName, $bytes) |
|
||||
} |
|
||||
|
|
||||
break |
|
||||
} |
|
||||
|
|
||||
([Microsoft.Win32.RegistryValueKind]::String) |
|
||||
{ |
|
||||
$array = @($Data) |
|
||||
|
|
||||
if ($array.Count -ne 1) |
|
||||
{ |
|
||||
$errorRecord = InvalidDataTypeCombinationErrorRecord -Message 'When -Type is set to String, -Data must be passed a scalar value or single-element array.' |
|
||||
$PSCmdlet.ThrowTerminatingError($errorRecord) |
|
||||
} |
|
||||
else |
|
||||
{ |
|
||||
$policyFile.SetStringValue($Key, $ValueName, $array[0].ToString()) |
|
||||
} |
|
||||
|
|
||||
break |
|
||||
} |
|
||||
|
|
||||
([Microsoft.Win32.RegistryValueKind]::ExpandString) |
|
||||
{ |
|
||||
$array = @($Data) |
|
||||
|
|
||||
if ($array.Count -ne 1) |
|
||||
{ |
|
||||
$errorRecord = InvalidDataTypeCombinationErrorRecord -Message 'When -Type is set to ExpandString, -Data must be passed a scalar value or single-element array.' |
|
||||
$PSCmdlet.ThrowTerminatingError($errorRecord) |
|
||||
} |
|
||||
else |
|
||||
{ |
|
||||
$policyFile.SetStringValue($Key, $ValueName, $array[0].ToString(), $true) |
|
||||
} |
|
||||
|
|
||||
break |
|
||||
} |
|
||||
|
|
||||
([Microsoft.Win32.RegistryValueKind]::DWord) |
|
||||
{ |
|
||||
$array = @($Data) |
|
||||
$dword = ($array | Select-Object -First 1) -as [UInt32] |
|
||||
if ($null -eq $dword -or $array.Count -ne 1) |
|
||||
{ |
|
||||
$errorRecord = InvalidDataTypeCombinationErrorRecord -Message 'When -Type is set to DWord, -Data must be passed a valid UInt32 value.' |
|
||||
$PSCmdlet.ThrowTerminatingError($errorRecord) |
|
||||
} |
|
||||
else |
|
||||
{ |
|
||||
$policyFile.SetDWORDValue($key, $ValueName, $dword) |
|
||||
} |
|
||||
|
|
||||
break |
|
||||
} |
|
||||
|
|
||||
([Microsoft.Win32.RegistryValueKind]::QWord) |
|
||||
{ |
|
||||
$array = @($Data) |
|
||||
$qword = ($array | Select-Object -First 1) -as [UInt64] |
|
||||
if ($null -eq $qword -or $array.Count -ne 1) |
|
||||
{ |
|
||||
$errorRecord = InvalidDataTypeCombinationErrorRecord -Message 'When -Type is set to QWord, -Data must be passed a valid UInt64 value.' |
|
||||
$PSCmdlet.ThrowTerminatingError($errorRecord) |
|
||||
} |
|
||||
else |
|
||||
{ |
|
||||
$policyFile.SetQWORDValue($key, $ValueName, $qword) |
|
||||
} |
|
||||
|
|
||||
break |
|
||||
} |
|
||||
|
|
||||
([Microsoft.Win32.RegistryValueKind]::MultiString) |
|
||||
{ |
|
||||
$strings = [string[]] @( |
|
||||
foreach ($item in @($Data)) |
|
||||
{ |
|
||||
$item.ToString() |
|
||||
} |
|
||||
) |
|
||||
|
|
||||
$policyFile.SetMultiStringValue($Key, $ValueName, $strings) |
|
||||
|
|
||||
break |
|
||||
} |
|
||||
|
|
||||
} # switch ($Type) |
|
||||
|
|
||||
$dirty = $true |
|
||||
} |
|
||||
catch |
|
||||
{ |
|
||||
throw |
|
||||
} |
|
||||
} |
|
||||
|
|
||||
end |
|
||||
{ |
|
||||
if ($dirty) |
|
||||
{ |
|
||||
$doUpdateGptIni = -not $NoGptIniUpdate |
|
||||
|
|
||||
try |
|
||||
{ |
|
||||
# SavePolicyFile contains the calls to $PSCmdlet.ShouldProcess, and will inherit our |
|
||||
# WhatIfPreference / ConfirmPreference values from here. |
|
||||
SavePolicyFile -PolicyFile $policyFile -UpdateGptIni:$doUpdateGptIni -ErrorAction Stop |
|
||||
} |
|
||||
catch |
|
||||
{ |
|
||||
$PSCmdlet.ThrowTerminatingError($_) |
|
||||
} |
|
||||
} |
|
||||
} |
|
||||
} |
|
||||
|
|
||||
<# |
|
||||
.SYNOPSIS |
|
||||
Retrieves the current setting(s) from a .pol file. |
|
||||
.DESCRIPTION |
|
||||
Retrieves the current setting(s) from a .pol file. |
|
||||
.PARAMETER Path |
|
||||
Path to the .pol file that is to be read. |
|
||||
.PARAMETER Key |
|
||||
The registry key inside the .pol file that you want to read. |
|
||||
.PARAMETER ValueName |
|
||||
The name of the registry value. May be set to an empty string to read the default value of a key. |
|
||||
.PARAMETER All |
|
||||
Switch indicating that all entries from the specified .pol file should be output, instead of searching for a specific key / ValueName pair. |
|
||||
.EXAMPLE |
|
||||
Get-PolicyFileEntry -Path $env:systemroot\system32\GroupPolicy\Machine\registry.pol -Key Software\Policies\Something -ValueName SomeValue |
|
||||
|
|
||||
Reads the value of Software\Policies\Something\SomeValue from the Machine admin templates of the local GPO. |
|
||||
Either returns an object with the data and type of this registry value (if present), or returns nothing, if not found. |
|
||||
.EXAMPLE |
|
||||
Get-PolicyFileEntry -Path $env:systemroot\system32\GroupPolicy\Machine\registry.pol -All |
|
||||
|
|
||||
Outputs all of the registry values from the local machine Administrative Templates |
|
||||
.INPUTS |
|
||||
None. This command does not accept pipeline input. |
|
||||
.OUTPUTS |
|
||||
If the specified registry value is found, the function outputs a PSCustomObject with the following properties: |
|
||||
ValueName: The same value that was passed to the -ValueName parameter |
|
||||
Key: The same value that was passed to the -Key parameter |
|
||||
Data: The current value assigned to the specified Key / ValueName in the .pol file. |
|
||||
Type: The RegistryValueKind type of the specified Key / ValueName in the .pol file. |
|
||||
If the specified registry value is not found in the .pol file, the command returns nothing. No error is produced. |
|
||||
.LINK |
|
||||
Set-PolicyFileEntry |
|
||||
.LINK |
|
||||
Remove-PolicyFileEntry |
|
||||
.LINK |
|
||||
Update-GptIniVersion |
|
||||
.LINK |
|
||||
about_RegistryValuesForAdminTemplates |
|
||||
#> |
|
||||
|
|
||||
function Get-PolicyFileEntry |
|
||||
{ |
|
||||
[CmdletBinding(DefaultParameterSetName = 'ByKeyAndValue')] |
|
||||
param ( |
|
||||
[Parameter(Mandatory = $true, Position = 0)] |
|
||||
[string] $Path, |
|
||||
|
|
||||
[Parameter(Mandatory = $true, Position = 1, ParameterSetName = 'ByKeyAndValue')] |
|
||||
[string] $Key, |
|
||||
|
|
||||
[Parameter(Mandatory = $true, Position = 2, ParameterSetName = 'ByKeyAndValue')] |
|
||||
[string] $ValueName, |
|
||||
|
|
||||
[Parameter(Mandatory = $true, ParameterSetName = 'All')] |
|
||||
[switch] $All |
|
||||
) |
|
||||
|
|
||||
if (Get-Command [G]et-CallerPreference -CommandType Function -Module PreferenceVariables) |
|
||||
{ |
|
||||
Get-CallerPreference -Cmdlet $PSCmdlet -SessionState $ExecutionContext.SessionState |
|
||||
} |
|
||||
|
|
||||
try |
|
||||
{ |
|
||||
$policyFile = OpenPolicyFile -Path $Path -ErrorAction Stop |
|
||||
} |
|
||||
catch |
|
||||
{ |
|
||||
$PSCmdlet.ThrowTerminatingError($_) |
|
||||
} |
|
||||
|
|
||||
if ($PSCmdlet.ParameterSetName -eq 'ByKeyAndValue') |
|
||||
{ |
|
||||
$entry = $policyFile.GetValue($Key, $ValueName) |
|
||||
|
|
||||
if ($null -ne $entry) |
|
||||
{ |
|
||||
PolEntryToPsObject -PolEntry $entry |
|
||||
} |
|
||||
} |
|
||||
else |
|
||||
{ |
|
||||
foreach ($entry in $policyFile.Entries) |
|
||||
{ |
|
||||
PolEntryToPsObject -PolEntry $entry |
|
||||
} |
|
||||
} |
|
||||
} |
|
||||
|
|
||||
<# |
|
||||
.SYNOPSIS |
|
||||
Removes a value from a .pol file. |
|
||||
.DESCRIPTION |
|
||||
Removes a value from a .pol file. By default, also updates the version number in the policy's gpt.ini file. |
|
||||
.PARAMETER Path |
|
||||
Path to the .pol file that is to be modified. |
|
||||
.PARAMETER Key |
|
||||
The registry key inside the .pol file from which you want to remove a value. |
|
||||
.PARAMETER ValueName |
|
||||
The name of the registry value to be removed. May be set to an empty string to remove the default value of a key. |
|
||||
.PARAMETER NoGptIniUpdate |
|
||||
When this switch is used, the command will not attempt to update the version number in the gpt.ini file |
|
||||
.EXAMPLE |
|
||||
Remove-PolicyFileEntry -Path $env:systemroot\system32\GroupPolicy\Machine\registry.pol -Key Software\Policies\Something -ValueName SomeValue |
|
||||
|
|
||||
Removes the value Software\Policies\Something\SomeValue from the local computer Machine GPO, if present. Updates the Machine version counter in $env:systemroot\system32\GroupPolicy\gpt.ini |
|
||||
.EXAMPLE |
|
||||
$entries = @( |
|
||||
New-Object psobject -Property @{ ValueName = 'MaxXResolution'; Data = 1680 } |
|
||||
New-Object psobject -Property @{ ValueName = 'MaxYResolution'; Data = 1050 } |
|
||||
) |
|
||||
|
|
||||
$entries | Remove-PolicyFileEntry -Path $env:SystemRoot\system32\GroupPolicy\Machine\registry.pol ` |
|
||||
-Key 'SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services' |
|
||||
|
|
||||
Example of using pipeline input to remove multiple values at once. The advantage to this approach is that the |
|
||||
.pol file on disk (and the GPT.ini file) will be updated if _any_ of the specified settings had to be removed, |
|
||||
and will be left alone if the file already did not contain any of those values. |
|
||||
|
|
||||
The Key property could have also been specified via the pipeline objects instead of on the command line, but |
|
||||
since both values shared the same Key, this example shows that you can pass the value in either way. |
|
||||
|
|
||||
.INPUTS |
|
||||
The Key and ValueName properties may be bound via the pipeline by property name. |
|
||||
.OUTPUTS |
|
||||
None. This command does not generate output. |
|
||||
.NOTES |
|
||||
If the specified policy file is already not present in the .pol file, the file will not be modified, and the gpt.ini file will not be updated. |
|
||||
.LINK |
|
||||
Get-PolicyFileEntry |
|
||||
.LINK |
|
||||
Set-PolicyFileEntry |
|
||||
.LINK |
|
||||
Update-GptIniVersion |
|
||||
.LINK |
|
||||
about_RegistryValuesForAdminTemplates |
|
||||
#> |
|
||||
|
|
||||
function Remove-PolicyFileEntry |
|
||||
{ |
|
||||
[CmdletBinding(SupportsShouldProcess = $true)] |
|
||||
param ( |
|
||||
[Parameter(Mandatory = $true, Position = 0)] |
|
||||
[string] $Path, |
|
||||
|
|
||||
[Parameter(Mandatory = $true, Position = 1, ValueFromPipelineByPropertyName = $true)] |
|
||||
[string] $Key, |
|
||||
|
|
||||
[Parameter(Mandatory = $true, Position = 2, ValueFromPipelineByPropertyName = $true)] |
|
||||
[string] $ValueName, |
|
||||
|
|
||||
[switch] $NoGptIniUpdate |
|
||||
) |
|
||||
|
|
||||
begin |
|
||||
{ |
|
||||
if (Get-Command [G]et-CallerPreference -CommandType Function -Module PreferenceVariables) |
|
||||
{ |
|
||||
Get-CallerPreference -Cmdlet $PSCmdlet -SessionState $ExecutionContext.SessionState |
|
||||
} |
|
||||
|
|
||||
$dirty = $false |
|
||||
|
|
||||
try |
|
||||
{ |
|
||||
$policyFile = OpenPolicyFile -Path $Path -ErrorAction Stop |
|
||||
} |
|
||||
catch |
|
||||
{ |
|
||||
$PSCmdlet.ThrowTerminatingError($_) |
|
||||
} |
|
||||
} |
|
||||
|
|
||||
process |
|
||||
{ |
|
||||
$entry = $policyFile.GetValue($Key, $ValueName) |
|
||||
|
|
||||
if ($null -eq $entry) |
|
||||
{ |
|
||||
Write-Verbose "Entry '$Key\$ValueName' is already not present in file '$Path'." |
|
||||
return |
|
||||
} |
|
||||
|
|
||||
Write-Verbose "Removing entry '$Key\$ValueName' from file '$Path'" |
|
||||
$policyFile.DeleteValue($Key, $ValueName) |
|
||||
$dirty = $true |
|
||||
} |
|
||||
|
|
||||
end |
|
||||
{ |
|
||||
if ($dirty) |
|
||||
{ |
|
||||
$doUpdateGptIni = -not $NoGptIniUpdate |
|
||||
|
|
||||
try |
|
||||
{ |
|
||||
# SavePolicyFile contains the calls to $PSCmdlet.ShouldProcess, and will inherit our |
|
||||
# WhatIfPreference / ConfirmPreference values from here. |
|
||||
SavePolicyFile -PolicyFile $policyFile -UpdateGptIni:$doUpdateGptIni -ErrorAction Stop |
|
||||
} |
|
||||
catch |
|
||||
{ |
|
||||
$PSCmdlet.ThrowTerminatingError($_) |
|
||||
} |
|
||||
} |
|
||||
} |
|
||||
} |
|
||||
|
|
||||
<# |
|
||||
.SYNOPSIS |
|
||||
Increments the version counter in a gpt.ini file. |
|
||||
.DESCRIPTION |
|
||||
Increments the version counter in a gpt.ini file. |
|
||||
.PARAMETER Path |
|
||||
Path to the gpt.ini file that is to be modified. |
|
||||
.PARAMETER PolicyType |
|
||||
Can be set to either 'Machine', 'User', or both. This affects how the value of the Version number in the ini file is changed. |
|
||||
.EXAMPLE |
|
||||
Update-GptIniVersion -Path $env:SystemRoot\system32\GroupPolicy\gpt.ini -PolicyType Machine |
|
||||
|
|
||||
Increments the Machine version counter of the local GPO. |
|
||||
.EXAMPLE |
|
||||
Update-GptIniVersion -Path $env:SystemRoot\system32\GroupPolicy\gpt.ini -PolicyType User |
|
||||
|
|
||||
Increments the User version counter of the local GPO. |
|
||||
.EXAMPLE |
|
||||
Update-GptIniVersion -Path $env:SystemRoot\system32\GroupPolicy\gpt.ini -PolicyType Machine,User |
|
||||
|
|
||||
Increments both the Machine and User version counters of the local GPO. |
|
||||
.INPUTS |
|
||||
None. This command does not accept pipeline input. |
|
||||
.OUTPUTS |
|
||||
None. This command does not generate output. |
|
||||
.NOTES |
|
||||
A gpt.ini file contains only a single Version value. However, this represents two separate counters, for machine and user versions. |
|
||||
The high 16 bits of the value are the User counter, and the low 16 bits are the Machine counter. For example (on PowerShell 3.0 |
|
||||
and later), the Version value when the Machine counter is set to 3 and the User counter is set to 5 can be found by evaluating this |
|
||||
expression: (5 -shl 16) -bor 3 , which will show up as decimal value 327683 in the INI file. |
|
||||
.LINK |
|
||||
Get-PolicyFileEntry |
|
||||
.LINK |
|
||||
Set-PolicyFileEntry |
|
||||
.LINK |
|
||||
Remove-PolicyFileEntry |
|
||||
.LINK |
|
||||
about_RegistryValuesForAdminTemplates |
|
||||
#> |
|
||||
|
|
||||
function Update-GptIniVersion |
|
||||
{ |
|
||||
[CmdletBinding(SupportsShouldProcess = $true)] |
|
||||
param ( |
|
||||
[Parameter(Mandatory = $true)] |
|
||||
[ValidateScript({ |
|
||||
if (Test-Path -LiteralPath $_ -PathType Leaf) |
|
||||
{ |
|
||||
return $true |
|
||||
} |
|
||||
|
|
||||
throw "Path '$_' does not exist." |
|
||||
})] |
|
||||
[string] $Path, |
|
||||
|
|
||||
[Parameter(Mandatory = $true)] |
|
||||
[ValidateSet('Machine', 'User')] |
|
||||
[string[]] $PolicyType |
|
||||
) |
|
||||
|
|
||||
if (Get-Command [G]et-CallerPreference -CommandType Function -Module PreferenceVariables) |
|
||||
{ |
|
||||
Get-CallerPreference -Cmdlet $PSCmdlet -SessionState $ExecutionContext.SessionState |
|
||||
} |
|
||||
|
|
||||
try |
|
||||
{ |
|
||||
IncrementGptIniVersion @PSBoundParameters |
|
||||
} |
|
||||
catch |
|
||||
{ |
|
||||
$PSCmdlet.ThrowTerminatingError($_) |
|
||||
} |
|
||||
} |
|
||||
@ -1,704 +0,0 @@ |
|||||
#requires -Version 2.0 |
|
||||
|
|
||||
$script:MachineExtensionGuids = '[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{D02B1F72-3407-48AE-BA88-E8213C6761F1}]' |
|
||||
$script:UserExtensionGuids = '[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{D02B1F73-3407-48AE-BA88-E8213C6761F1}]' |
|
||||
|
|
||||
function OpenPolicyFile |
|
||||
{ |
|
||||
[CmdletBinding()] |
|
||||
param ( |
|
||||
[Parameter(Mandatory = $true)] |
|
||||
[string] $Path |
|
||||
) |
|
||||
|
|
||||
$policyFile = New-Object TJX.PolFileEditor.PolFile |
|
||||
$policyFile.FileName = $PSCmdlet.GetUnresolvedProviderPathFromPSPath($Path) |
|
||||
|
|
||||
if (Test-Path -LiteralPath $policyFile.FileName) |
|
||||
{ |
|
||||
try |
|
||||
{ |
|
||||
$policyFile.LoadFile() |
|
||||
} |
|
||||
catch [TJX.PolFileEditor.FileFormatException] |
|
||||
{ |
|
||||
$message = "File '$Path' is not a valid POL file." |
|
||||
$exception = New-Object System.Exception($message) |
|
||||
|
|
||||
$errorRecord = New-Object System.Management.Automation.ErrorRecord( |
|
||||
$exception, 'InvalidPolFileContents', [System.Management.Automation.ErrorCategory]::InvalidData, $Path |
|
||||
) |
|
||||
|
|
||||
throw $errorRecord |
|
||||
} |
|
||||
catch |
|
||||
{ |
|
||||
$errorRecord = $_ |
|
||||
$message = "Error loading policy file at path '$Path': $($errorRecord.Exception.Message)" |
|
||||
$exception = New-Object System.Exception($message, $errorRecord.Exception) |
|
||||
|
|
||||
$newErrorRecord = New-Object System.Management.Automation.ErrorRecord( |
|
||||
$exception, 'FailedToOpenPolicyFile', [System.Management.Automation.ErrorCategory]::OperationStopped, $Path |
|
||||
) |
|
||||
|
|
||||
throw $newErrorRecord |
|
||||
} |
|
||||
} |
|
||||
|
|
||||
return $policyFile |
|
||||
} |
|
||||
|
|
||||
function PolEntryToPsObject |
|
||||
{ |
|
||||
param ( |
|
||||
[TJX.PolFileEditor.PolEntry] $PolEntry |
|
||||
) |
|
||||
|
|
||||
$type = PolEntryTypeToRegistryValueKind $PolEntry.Type |
|
||||
$data = GetEntryData -Entry $PolEntry -Type $type |
|
||||
|
|
||||
return New-Object psobject -Property @{ |
|
||||
Key = $PolEntry.KeyName |
|
||||
ValueName = $PolEntry.ValueName |
|
||||
Type = $type |
|
||||
Data = $data |
|
||||
} |
|
||||
} |
|
||||
|
|
||||
function GetEntryData |
|
||||
{ |
|
||||
param ( |
|
||||
[TJX.PolFileEditor.PolEntry] $Entry, |
|
||||
[Microsoft.Win32.RegistryValueKind] $Type |
|
||||
) |
|
||||
|
|
||||
switch ($type) |
|
||||
{ |
|
||||
([Microsoft.Win32.RegistryValueKind]::Binary) |
|
||||
{ |
|
||||
return $Entry.BinaryValue |
|
||||
} |
|
||||
|
|
||||
([Microsoft.Win32.RegistryValueKind]::DWord) |
|
||||
{ |
|
||||
return $Entry.DWORDValue |
|
||||
} |
|
||||
|
|
||||
([Microsoft.Win32.RegistryValueKind]::ExpandString) |
|
||||
{ |
|
||||
return $Entry.StringValue |
|
||||
} |
|
||||
|
|
||||
([Microsoft.Win32.RegistryValueKind]::MultiString) |
|
||||
{ |
|
||||
return $Entry.MultiStringValue |
|
||||
} |
|
||||
|
|
||||
([Microsoft.Win32.RegistryValueKind]::QWord) |
|
||||
{ |
|
||||
return $Entry.QWORDValue |
|
||||
} |
|
||||
|
|
||||
([Microsoft.Win32.RegistryValueKind]::String) |
|
||||
{ |
|
||||
return $Entry.StringValue |
|
||||
} |
|
||||
} |
|
||||
|
|
||||
} |
|
||||
|
|
||||
function SavePolicyFile |
|
||||
{ |
|
||||
[CmdletBinding(SupportsShouldProcess = $true)] |
|
||||
param ( |
|
||||
[Parameter(Mandatory = $true)] |
|
||||
[TJX.PolFileEditor.PolFile] $PolicyFile, |
|
||||
|
|
||||
[switch] $UpdateGptIni |
|
||||
) |
|
||||
|
|
||||
if ($PSCmdlet.ShouldProcess($PolicyFile.FileName, 'Save new settings')) |
|
||||
{ |
|
||||
$parentPath = Split-Path $PolicyFile.FileName -Parent |
|
||||
if (-not (Test-Path -LiteralPath $parentPath -PathType Container)) |
|
||||
{ |
|
||||
try |
|
||||
{ |
|
||||
$null = New-Item -Path $parentPath -ItemType Directory -ErrorAction Stop -Confirm:$false -WhatIf:$false |
|
||||
} |
|
||||
catch |
|
||||
{ |
|
||||
$errorRecord = $_ |
|
||||
$message = "Error creating parent folder of path '$Path': $($errorRecord.Exception.Message)" |
|
||||
$exception = New-Object System.Exception($message, $errorRecord.Exception) |
|
||||
|
|
||||
$newErrorRecord = New-Object System.Management.Automation.ErrorRecord( |
|
||||
$exception, 'CreateParentFolderError', $errorRecord.CategoryInfo.Category, $Path |
|
||||
) |
|
||||
|
|
||||
throw $newErrorRecord |
|
||||
} |
|
||||
} |
|
||||
|
|
||||
try |
|
||||
{ |
|
||||
$PolicyFile.SaveFile() |
|
||||
} |
|
||||
catch |
|
||||
{ |
|
||||
$errorRecord = $_ |
|
||||
$message = "Error saving policy file to path '$($PolicyFile.FileName)': $($errorRecord.Exception.Message)" |
|
||||
$exception = New-Object System.Exception($message, $errorRecord.Exception) |
|
||||
|
|
||||
$newErrorRecord = New-Object System.Management.Automation.ErrorRecord( |
|
||||
$exception, 'FailedToSavePolicyFile', [System.Management.Automation.ErrorCategory]::OperationStopped, $PolicyFile |
|
||||
) |
|
||||
|
|
||||
throw $newErrorRecord |
|
||||
} |
|
||||
} |
|
||||
|
|
||||
if ($UpdateGptIni) |
|
||||
{ |
|
||||
if ($policyFile.FileName -match '^(.*)\\+([^\\]+)\\+[^\\]+$' -and |
|
||||
$Matches[2] -eq 'User' -or $Matches[2] -eq 'Machine') |
|
||||
{ |
|
||||
$iniPath = Join-Path $Matches[1] GPT.ini |
|
||||
|
|
||||
if (Test-Path -LiteralPath $iniPath -PathType Leaf) |
|
||||
{ |
|
||||
if ($PSCmdlet.ShouldProcess($iniPath, 'Increment version number in INI file')) |
|
||||
{ |
|
||||
IncrementGptIniVersion -Path $iniPath -PolicyType $Matches[2] -Confirm:$false -WhatIf:$false |
|
||||
} |
|
||||
} |
|
||||
else |
|
||||
{ |
|
||||
if ($PSCmdlet.ShouldProcess($iniPath, 'Create new gpt.ini file')) |
|
||||
{ |
|
||||
NewGptIni -Path $iniPath -PolicyType $Matches[2] |
|
||||
} |
|
||||
} |
|
||||
} |
|
||||
} |
|
||||
} |
|
||||
|
|
||||
function NewGptIni |
|
||||
{ |
|
||||
param ( |
|
||||
[string] $Path, |
|
||||
[string[]] $PolicyType |
|
||||
) |
|
||||
|
|
||||
$parent = Split-Path $Path -Parent |
|
||||
|
|
||||
if (-not (Test-Path $parent -PathType Container)) |
|
||||
{ |
|
||||
$null = New-Item -Path $parent -ItemType Directory -ErrorAction Stop |
|
||||
} |
|
||||
|
|
||||
$version = GetNewVersionNumber -Version 0 -PolicyType $PolicyType |
|
||||
|
|
||||
Set-Content -Path $Path -Encoding Ascii -Value @" |
|
||||
[General] |
|
||||
gPCMachineExtensionNames=$script:MachineExtensionGuids |
|
||||
Version=$version |
|
||||
gPCUserExtensionNames=$script:UserExtensionGuids |
|
||||
"@ |
|
||||
} |
|
||||
|
|
||||
function IncrementGptIniVersion |
|
||||
{ |
|
||||
[CmdletBinding(SupportsShouldProcess = $true)] |
|
||||
param ( |
|
||||
[string] $Path, |
|
||||
[string[]] $PolicyType |
|
||||
) |
|
||||
|
|
||||
$foundVersionLine = $false |
|
||||
$section = '' |
|
||||
|
|
||||
$newContents = @( |
|
||||
foreach ($line in Get-Content $Path) |
|
||||
{ |
|
||||
# This might not be the most unreadable regex ever, but it's trying hard to be! |
|
||||
# It's looking for section lines: [SectionName] |
|
||||
if ($line -match '^\s*\[([^\]]+)\]\s*$') |
|
||||
{ |
|
||||
if ($section -eq 'General') |
|
||||
{ |
|
||||
if (-not $foundVersionLine) |
|
||||
{ |
|
||||
$foundVersionLine = $true |
|
||||
$newVersion = GetNewVersionNumber -Version 0 -PolicyType $PolicyType |
|
||||
|
|
||||
"Version=$newVersion" |
|
||||
} |
|
||||
|
|
||||
if (-not $foundMachineExtensionLine) |
|
||||
{ |
|
||||
$foundMachineExtensionLine = $true |
|
||||
"gPCMachineExtensionNames=$script:MachineExtensionGuids" |
|
||||
} |
|
||||
|
|
||||
if (-not $foundUserExtensionLine) |
|
||||
{ |
|
||||
$foundUserExtensionLine = $true |
|
||||
"gPCUserExtensionNames=$script:UserExtensionGuids" |
|
||||
} |
|
||||
} |
|
||||
|
|
||||
$section = $matches[1] |
|
||||
} |
|
||||
elseif ($section -eq 'General' -and |
|
||||
$line -match '^\s*Version\s*=\s*(\d+)\s*$' -and |
|
||||
$null -ne ($version = $matches[1] -as [uint32])) |
|
||||
{ |
|
||||
$foundVersionLine = $true |
|
||||
$newVersion = GetNewVersionNumber -Version $version -PolicyType $PolicyType |
|
||||
$line = "Version=$newVersion" |
|
||||
} |
|
||||
elseif ($section -eq 'General' -and $line -match '^\s*gPC(Machine|User)ExtensionNames\s*=') |
|
||||
{ |
|
||||
if ($matches[1] -eq 'Machine') |
|
||||
{ |
|
||||
$foundMachineExtensionLine = $true |
|
||||
} |
|
||||
else |
|
||||
{ |
|
||||
$foundUserExtensionLine = $true |
|
||||
} |
|
||||
|
|
||||
$line = EnsureAdminTemplateCseGuidsArePresent $line |
|
||||
} |
|
||||
|
|
||||
$line |
|
||||
} |
|
||||
|
|
||||
if ($section -eq 'General') |
|
||||
{ |
|
||||
if (-not $foundVersionLine) |
|
||||
{ |
|
||||
$foundVersionLine = $true |
|
||||
$newVersion = GetNewVersionNumber -Version 0 -PolicyType $PolicyType |
|
||||
|
|
||||
"Version=$newVersion" |
|
||||
} |
|
||||
|
|
||||
if (-not $foundMachineExtensionLine) |
|
||||
{ |
|
||||
$foundMachineExtensionLine = $true |
|
||||
"gPCMachineExtensionNames=$script:MachineExtensionGuids" |
|
||||
} |
|
||||
|
|
||||
if (-not $foundUserExtensionLine) |
|
||||
{ |
|
||||
$foundUserExtensionLine = $true |
|
||||
"gPCUserExtensionNames=$script:MachineExtensionGuids" |
|
||||
} |
|
||||
} |
|
||||
) |
|
||||
|
|
||||
if ($PSCmdlet.ShouldProcess($Path, 'Increment Version number')) |
|
||||
{ |
|
||||
Set-Content -Path $Path -Value $newContents -Encoding Ascii -Confirm:$false -WhatIf:$false |
|
||||
} |
|
||||
} |
|
||||
|
|
||||
function EnsureAdminTemplateCseGuidsArePresent |
|
||||
{ |
|
||||
param ([string] $Line) |
|
||||
|
|
||||
# These lines contain pairs of GUIDs in "registry" format (with the curly braces), separated by nothing, with |
|
||||
# each pair of GUIDs wrapped in square brackets. Example: |
|
||||
|
|
||||
# gPCMachineExtensionNames=[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{D02B1F72-3407-48AE-BA88-E8213C6761F1}] |
|
||||
|
|
||||
# Per Darren Mar-Elia, these GUIDs must be in alphabetical order, or GP processing will have problems. |
|
||||
|
|
||||
if ($Line -notmatch '\s*(gPC(?:Machine|User)ExtensionNames)\s*=\s*(.*)$') |
|
||||
{ |
|
||||
throw "Malformed gpt.ini line: $Line" |
|
||||
} |
|
||||
|
|
||||
$valueName = $matches[1] |
|
||||
$guidStrings = @($matches[2] -split '(?<=\])(?=\[)') |
|
||||
|
|
||||
if ($matches[1] -eq 'gPCMachineExtensionNames') |
|
||||
{ |
|
||||
$toolExtensionGuid = $script:MachineExtensionGuids |
|
||||
} |
|
||||
else |
|
||||
{ |
|
||||
$toolExtensionGuid = $script:UserExtensionGuids |
|
||||
} |
|
||||
|
|
||||
$guidList = @( |
|
||||
$guidStrings |
|
||||
$toolExtensionGuid |
|
||||
) |
|
||||
|
|
||||
$newGuidString = ($guidList | Sort-Object -Unique) -join '' |
|
||||
|
|
||||
return "$valueName=$newGuidString" |
|
||||
} |
|
||||
|
|
||||
function GetNewVersionNumber |
|
||||
{ |
|
||||
param ( |
|
||||
[UInt32] $Version, |
|
||||
[string[]] $PolicyType |
|
||||
) |
|
||||
|
|
||||
# User version is the high 16 bits, Machine version is the low 16 bits. |
|
||||
# Reference: http://blogs.technet.com/b/grouppolicy/archive/2007/12/14/understanding-the-gpo-version-number.aspx |
|
||||
|
|
||||
$pair = UInt32ToUInt16Pair -UInt32 $version |
|
||||
|
|
||||
if ($PolicyType -contains 'User') |
|
||||
{ |
|
||||
$pair.HighPart++ |
|
||||
} |
|
||||
|
|
||||
if ($PolicyType -contains 'Machine') |
|
||||
{ |
|
||||
$pair.LowPart++ |
|
||||
} |
|
||||
|
|
||||
return UInt16PairToUInt32 -UInt16Pair $pair |
|
||||
} |
|
||||
|
|
||||
function UInt32ToUInt16Pair |
|
||||
{ |
|
||||
param ([UInt32] $UInt32) |
|
||||
|
|
||||
# Deliberately avoiding bitwise shift operators here, for PowerShell v2 compatibility. |
|
||||
|
|
||||
$lowPart = $UInt32 -band 0xFFFF |
|
||||
$highPart = ($UInt32 - $lowPart) / 0x10000 |
|
||||
|
|
||||
return New-Object psobject -Property @{ |
|
||||
LowPart = [UInt16] $lowPart |
|
||||
HighPart = [UInt16] $highPart |
|
||||
} |
|
||||
} |
|
||||
|
|
||||
function UInt16PairToUInt32 |
|
||||
{ |
|
||||
param ([object] $UInt16Pair) |
|
||||
|
|
||||
# Deliberately avoiding bitwise shift operators here, for PowerShell v2 compatibility. |
|
||||
|
|
||||
return ([UInt32] $UInt16Pair.HighPart) * 0x10000 + $UInt16Pair.LowPart |
|
||||
} |
|
||||
|
|
||||
function PolEntryTypeToRegistryValueKind |
|
||||
{ |
|
||||
param ([TJX.PolFileEditor.PolEntryType] $PolEntryType) |
|
||||
|
|
||||
switch ($PolEntryType) |
|
||||
{ |
|
||||
([TJX.PolFileEditor.PolEntryType]::REG_NONE) |
|
||||
{ |
|
||||
return [Microsoft.Win32.RegistryValueKind]::None |
|
||||
} |
|
||||
|
|
||||
([TJX.PolFileEditor.PolEntryType]::REG_DWORD) |
|
||||
{ |
|
||||
return [Microsoft.Win32.RegistryValueKind]::DWord |
|
||||
} |
|
||||
|
|
||||
([TJX.PolFileEditor.PolEntryType]::REG_DWORD_BIG_ENDIAN) |
|
||||
{ |
|
||||
return [Microsoft.Win32.RegistryValueKind]::DWord |
|
||||
} |
|
||||
|
|
||||
([TJX.PolFileEditor.PolEntryType]::REG_BINARY) |
|
||||
{ |
|
||||
return [Microsoft.Win32.RegistryValueKind]::Binary |
|
||||
} |
|
||||
|
|
||||
([TJX.PolFileEditor.PolEntryType]::REG_EXPAND_SZ) |
|
||||
{ |
|
||||
return [Microsoft.Win32.RegistryValueKind]::ExpandString |
|
||||
} |
|
||||
|
|
||||
([TJX.PolFileEditor.PolEntryType]::REG_MULTI_SZ) |
|
||||
{ |
|
||||
return [Microsoft.Win32.RegistryValueKind]::MultiString |
|
||||
} |
|
||||
|
|
||||
([TJX.PolFileEditor.PolEntryType]::REG_QWORD) |
|
||||
{ |
|
||||
return [Microsoft.Win32.RegistryValueKind]::QWord |
|
||||
} |
|
||||
|
|
||||
([TJX.PolFileEditor.PolEntryType]::REG_SZ) |
|
||||
{ |
|
||||
return [Microsoft.Win32.RegistryValueKind]::String |
|
||||
} |
|
||||
} |
|
||||
} |
|
||||
|
|
||||
function GetPolFilePath |
|
||||
{ |
|
||||
param ( |
|
||||
[Parameter(Mandatory = $true, ParameterSetName = 'PolicyType')] |
|
||||
[string] $PolicyType, |
|
||||
|
|
||||
[Parameter(Mandatory = $true, ParameterSetName = 'Account')] |
|
||||
[string] $Account |
|
||||
) |
|
||||
|
|
||||
if ($PolicyType) |
|
||||
{ |
|
||||
switch ($PolicyType) |
|
||||
{ |
|
||||
'Machine' |
|
||||
{ |
|
||||
return Join-Path $env:SystemRoot System32\GroupPolicy\Machine\registry.pol |
|
||||
} |
|
||||
|
|
||||
'User' |
|
||||
{ |
|
||||
return Join-Path $env:SystemRoot System32\GroupPolicy\User\registry.pol |
|
||||
} |
|
||||
|
|
||||
'Administrators' |
|
||||
{ |
|
||||
# BUILTIN\Administrators well-known SID |
|
||||
return Join-Path $env:SystemRoot System32\GroupPolicyUsers\S-1-5-32-544\User\registry.pol |
|
||||
} |
|
||||
|
|
||||
'NonAdministrators' |
|
||||
{ |
|
||||
# BUILTIN\Users well-known SID |
|
||||
return Join-Path $env:SystemRoot System32\GroupPolicyUsers\S-1-5-32-545\User\registry.pol |
|
||||
} |
|
||||
} |
|
||||
} |
|
||||
else |
|
||||
{ |
|
||||
try |
|
||||
{ |
|
||||
$sid = $Account -as [System.Security.Principal.SecurityIdentifier] |
|
||||
|
|
||||
if ($null -eq $sid) |
|
||||
{ |
|
||||
$sid = GetSidForAccount $Account |
|
||||
} |
|
||||
|
|
||||
return Join-Path $env:SystemRoot "System32\GroupPolicyUsers\$($sid.Value)\User\registry.pol" |
|
||||
} |
|
||||
catch |
|
||||
{ |
|
||||
throw |
|
||||
} |
|
||||
} |
|
||||
} |
|
||||
|
|
||||
function GetSidForAccount($Account) |
|
||||
{ |
|
||||
$acc = $Account |
|
||||
if ($acc -notlike '*\*') { $acc = "$env:COMPUTERNAME\$acc" } |
|
||||
|
|
||||
try |
|
||||
{ |
|
||||
$ntAccount = [System.Security.Principal.NTAccount]$acc |
|
||||
return $ntAccount.Translate([System.Security.Principal.SecurityIdentifier]) |
|
||||
} |
|
||||
catch |
|
||||
{ |
|
||||
$message = "Could not translate account '$acc' to a security identifier." |
|
||||
$exception = New-Object System.Exception($message, $_.Exception) |
|
||||
$errorRecord = New-Object System.Management.Automation.ErrorRecord( |
|
||||
$exception, |
|
||||
'CouldNotGetSidForAccount', |
|
||||
[System.Management.Automation.ErrorCategory]::ObjectNotFound, |
|
||||
$Acc |
|
||||
) |
|
||||
|
|
||||
throw $errorRecord |
|
||||
} |
|
||||
} |
|
||||
|
|
||||
function DataIsEqual |
|
||||
{ |
|
||||
param ( |
|
||||
[object] $First, |
|
||||
[object] $Second, |
|
||||
[Microsoft.Win32.RegistryValueKind] $Type |
|
||||
) |
|
||||
|
|
||||
if ($Type -eq [Microsoft.Win32.RegistryValueKind]::String -or |
|
||||
$Type -eq [Microsoft.Win32.RegistryValueKind]::ExpandString -or |
|
||||
$Type -eq [Microsoft.Win32.RegistryValueKind]::DWord -or |
|
||||
$Type -eq [Microsoft.Win32.RegistryValueKind]::QWord) |
|
||||
{ |
|
||||
return @($First)[0] -ceq @($Second)[0] |
|
||||
} |
|
||||
|
|
||||
# If we get here, $Type is either MultiString or Binary, both of which need to compare arrays. |
|
||||
# The PolicyFileEditor module never returns type Unknown or None. |
|
||||
|
|
||||
$First = @($First) |
|
||||
$Second = @($Second) |
|
||||
|
|
||||
if ($First.Count -ne $Second.Count) { return $false } |
|
||||
|
|
||||
$count = $First.Count |
|
||||
for ($i = 0; $i -lt $count; $i++) |
|
||||
{ |
|
||||
if ($First[$i] -cne $Second[$i]) { return $false } |
|
||||
} |
|
||||
|
|
||||
return $true |
|
||||
} |
|
||||
|
|
||||
function ParseKeyValueName |
|
||||
{ |
|
||||
param ([string] $KeyValueName) |
|
||||
|
|
||||
$key = $KeyValueName -replace '^\\+|\\+$' |
|
||||
$valueName = '' |
|
||||
|
|
||||
if ($KeyValueName -match '^\\*(?<Key>.+?)\\+(?<ValueName>[^\\]*)$') |
|
||||
{ |
|
||||
$key = $matches['Key'] -replace '\\{2,}', '\' |
|
||||
$valueName = $matches['ValueName'] |
|
||||
} |
|
||||
|
|
||||
return $key, $valueName |
|
||||
} |
|
||||
|
|
||||
function GetTargetResourceCommon |
|
||||
{ |
|
||||
param ( |
|
||||
[string] $Path, |
|
||||
[string] $KeyValueName |
|
||||
) |
|
||||
|
|
||||
$configuration = @{ |
|
||||
KeyValueName = $KeyValueName |
|
||||
Ensure = 'Absent' |
|
||||
Data = $null |
|
||||
Type = [Microsoft.Win32.RegistryValueKind]::Unknown |
|
||||
} |
|
||||
|
|
||||
if (Test-Path -LiteralPath $path -PathType Leaf) |
|
||||
{ |
|
||||
$key, $valueName = ParseKeyValueName $KeyValueName |
|
||||
$entry = Get-PolicyFileEntry -Path $Path -Key $key -ValueName $valueName |
|
||||
|
|
||||
if ($entry) |
|
||||
{ |
|
||||
$configuration['Ensure'] = 'Present' |
|
||||
$configuration['Type'] = $entry.Type |
|
||||
$configuration['Data'] = @($entry.Data) |
|
||||
} |
|
||||
} |
|
||||
|
|
||||
return $configuration |
|
||||
} |
|
||||
|
|
||||
function SetTargetResourceCommon |
|
||||
{ |
|
||||
param ( |
|
||||
[string] $Path, |
|
||||
[string] $KeyValueName, |
|
||||
[string] $Ensure, |
|
||||
[string[]] $Data, |
|
||||
[Microsoft.Win32.RegistryValueKind] $Type |
|
||||
) |
|
||||
|
|
||||
if ($null -eq $Data) { $Data = @() } |
|
||||
|
|
||||
try |
|
||||
{ |
|
||||
Assert-ValidDataAndType -Data $Data -Type $Type |
|
||||
} |
|
||||
catch |
|
||||
{ |
|
||||
Write-Error -ErrorRecord $_ |
|
||||
return |
|
||||
} |
|
||||
|
|
||||
$key, $valueName = ParseKeyValueName $KeyValueName |
|
||||
|
|
||||
if ($Ensure -eq 'Present') |
|
||||
{ |
|
||||
Set-PolicyFileEntry -Path $Path -Key $key -ValueName $valueName -Data $Data -Type $Type |
|
||||
} |
|
||||
else |
|
||||
{ |
|
||||
Remove-PolicyFileEntry -Path $Path -Key $key -ValueName $valueName |
|
||||
} |
|
||||
} |
|
||||
|
|
||||
function TestTargetResourceCommon |
|
||||
{ |
|
||||
[OutputType([bool])] |
|
||||
param ( |
|
||||
[string] $Path, |
|
||||
[string] $KeyValueName, |
|
||||
[string] $Ensure, |
|
||||
[string[]] $Data, |
|
||||
[Microsoft.Win32.RegistryValueKind] $Type |
|
||||
) |
|
||||
|
|
||||
if ($null -eq $Data) { $Data = @() } |
|
||||
|
|
||||
try |
|
||||
{ |
|
||||
Assert-ValidDataAndType -Data $Data -Type $Type |
|
||||
} |
|
||||
catch |
|
||||
{ |
|
||||
Write-Error -ErrorRecord $_ |
|
||||
return $false |
|
||||
} |
|
||||
|
|
||||
$key, $valueName = ParseKeyValueName $KeyValueName |
|
||||
|
|
||||
$fileExists = Test-Path -LiteralPath $Path -PathType Leaf |
|
||||
|
|
||||
if ($Ensure -eq 'Present') |
|
||||
{ |
|
||||
if (-not $fileExists) { return $false } |
|
||||
$entry = Get-PolicyFileEntry -Path $Path -Key $key -ValueName $valueName |
|
||||
|
|
||||
return $null -ne $entry -and $Type -eq $entry.Type -and (DataIsEqual $entry.Data $Data -Type $Type) |
|
||||
} |
|
||||
else # Ensure is 'Absent' |
|
||||
{ |
|
||||
if (-not $fileExists) { return $true } |
|
||||
$entry = Get-PolicyFileEntry -Path $Path -Key $key -ValueName $valueName |
|
||||
|
|
||||
return $null -eq $entry |
|
||||
} |
|
||||
|
|
||||
} |
|
||||
|
|
||||
function Assert-ValidDataAndType |
|
||||
{ |
|
||||
param ( |
|
||||
[string[]] $Data, |
|
||||
[Microsoft.Win32.RegistryValueKind] $Type |
|
||||
) |
|
||||
|
|
||||
if ($Type -ne [Microsoft.Win32.RegistryValueKind]::MultiString -and |
|
||||
$Type -ne [Microsoft.Win32.RegistryValueKind]::Binary -and |
|
||||
$Data.Count -gt 1) |
|
||||
{ |
|
||||
$errorRecord = InvalidDataTypeCombinationErrorRecord -Message 'Do not pass arrays with multiple values to the -Data parameter when -Type is not set to either Binary or MultiString.' |
|
||||
throw $errorRecord |
|
||||
} |
|
||||
} |
|
||||
|
|
||||
function InvalidDataTypeCombinationErrorRecord($Message) |
|
||||
{ |
|
||||
$exception = New-Object System.Exception($Message) |
|
||||
return New-Object System.Management.Automation.ErrorRecord( |
|
||||
$exception, 'InvalidDataTypeCombination', [System.Management.Automation.ErrorCategory]::InvalidArgument, $null |
|
||||
) |
|
||||
} |
|
||||
Binary file not shown.
@ -1,43 +0,0 @@ |
|||||
@{ |
|
||||
ModuleToProcess = 'PolicyFileEditor.psm1' |
|
||||
ModuleVersion = '3.0.1' |
|
||||
GUID = '110a2398-3053-4ffc-89d1-1b6a38a2dc86' |
|
||||
Author = 'Dave Wyatt' |
|
||||
CompanyName = 'Home' |
|
||||
Copyright = '(c) 2015 Dave Wyatt. All rights reserved.' |
|
||||
Description = 'Commands and DSC resource for modifying Administrative Templates settings in local GPO registry.pol files.' |
|
||||
PowerShellVersion = '2.0' |
|
||||
# PowerShellHostName = '' |
|
||||
# PowerShellHostVersion = '' |
|
||||
DotNetFrameworkVersion = '2.0' |
|
||||
# CLRVersion = '' |
|
||||
# ProcessorArchitecture = '' |
|
||||
# RequiredModules = @() |
|
||||
# RequiredAssemblies = @() |
|
||||
# ScriptsToProcess = @() |
|
||||
# TypesToProcess = @() |
|
||||
# FormatsToProcess = @() |
|
||||
# NestedModules = @() |
|
||||
FunctionsToExport = @('Set-PolicyFileEntry', 'Remove-PolicyFileEntry', 'Get-PolicyFileEntry', 'Update-GptIniVersion') |
|
||||
# CmdletsToExport = '*' |
|
||||
# VariablesToExport = '*' |
|
||||
# AliasesToExport = '*' |
|
||||
# DscResourcesToExport = @() |
|
||||
# ModuleList = @() |
|
||||
# FileList = @() |
|
||||
|
|
||||
# HelpInfoURI = '' |
|
||||
|
|
||||
# DefaultCommandPrefix = '' |
|
||||
|
|
||||
PrivateData = @{ |
|
||||
PSData = @{ |
|
||||
# Tags = @() |
|
||||
LicenseUri = 'https://www.apache.org/licenses/LICENSE-2.0.html' |
|
||||
ProjectUri = 'https://github.com/dlwyatt/PolicyFileEditor' |
|
||||
# IconUri = '' |
|
||||
ReleaseNotes = 'Updated resource schemas to be more friendly with Invoke-DscResource.' |
|
||||
} |
|
||||
} |
|
||||
} |
|
||||
|
|
||||
@ -1,10 +0,0 @@ |
|||||
#requires -Version 2.0 |
|
||||
|
|
||||
$scriptRoot = Split-Path $MyInvocation.MyCommand.Path -Parent |
|
||||
$dllPath = Join-Path $scriptRoot PolFileEditor.dll |
|
||||
|
|
||||
Add-Type -Path $dllPath -ErrorAction Stop |
|
||||
|
|
||||
$commandsFile = Join-Path $scriptRoot Commands.ps1 |
|
||||
|
|
||||
. $commandsFile |
|
||||
Loading…
Reference in new issue