Sync Request

.vscode/launch.json

@@ -0,0 +1,26 @@
+{
+    "version": "0.2.0",
+    "configurations": [
+        {
+            "type": "PowerShell",
+            "request": "launch",
+            "name": "PowerShell Launch (current file)",
+            "script": "${file}",
+            "args": [],
+            "cwd": "${file}"
+        },
+        {
+            "type": "PowerShell",
+            "request": "attach",
+            "name": "PowerShell Attach to Host Process",
+            "processId": "${command.PickPSHostProcess}",
+            "runspaceId": 1
+        },
+        {
+            "type": "PowerShell",
+            "request": "launch",
+            "name": "PowerShell Interactive Session",
+            "cwd": "${workspaceRoot}"
+        }
+    ]
+}

AD/Get-ADCommonGroup.ps1

@@ -0,0 +1,40 @@
+[CmdletBinding()]
+param (
+	[Parameter(Mandatory = $true)]
+    [ValidateScript({ Get-ADGroup -Identity $_ })]
+	[string]$GroupName
+)
+
+begin {
+    Import-Module ActiveDirectory
+    $Group = Get-ADGroup -Identity $GroupName
+    $AllGroups = @{}
+}
+
+process {
+    $Members = Get-ADGroupMember -Identity $Group
+
+    $Members | ForEach-Object {
+        $User = $_.SamAccountName
+
+        (Get-ADUser $User -Properties MemberOf).MemberOf | ForEach-Object {
+            # Check if the group exists in our list
+            if ($AllGroups.ContainsKey($_)) {
+                $AllGroups.($_)++
+            } else {
+                # Item is unique so add it to the list
+                $AllGroups.Add($_, 1)
+            }
+        }
+    }
+
+    Write-Host "Results:"
+    $AllGroups | Format-Table -AutoSize
+    $AllGroups.GetEnumerator() | Select-Object -Property Key, Value | 
+        Export-Csv -Path .\$GroupName-CommonGroups.csv -NoTypeInformation
+
+    Write-Host "Common memberships:"
+    $AllGroups.GetEnumerator() | ForEach-Object {
+        if ($_.Value -eq $Members.Count) { $_.Key }
+    }
+}

AD/Get-ADGroupReport.ps1

@@ -0,0 +1,119 @@
+function Get-ADGroupReport {
+    [CmdletBinding()]
+    Param(
+        [Parameter(Mandatory = $true)]
+        [ValidateNotNullorEmpty()]
+        [string]$SaveToCsv,
+
+        [Parameter(Mandatory = $false)]
+        [ValidateNotNullorEmpty()]
+        [string]$ADGroupFilter = 'GroupCategory -eq "Distribution"'
+    )
+
+    begin {
+        Import-Module ActiveDirectory
+
+        Write-Progress -Id 1 -Activity "Getting AD groups using filter $ADGroupFilter..."
+        $Groups = Get-ADGroup -Filter $ADGroupFilter
+        $Users = @{}
+    }
+
+    process {
+        $GroupCount = $Groups.Count
+        $GroupCounter = 0
+
+        foreach ($Group in $Groups) {
+            $GroupCounter++
+
+            $GroupName = $Group.Name
+
+            $GroupProgressParams = @{
+                'Id' = 1
+                'Activity' = "Processing group $GroupCounter of $GroupCount"
+                'Status' = $GroupName
+                'PercentComplete' = ($GroupCounter / $GroupCount) * 100
+            }
+            Write-Progress @GroupProgressParams
+
+            $Members = Get-ADGroupMember $Group -Recursive
+
+            $MemberCount = $Members.Count
+            $MemberCounter = 0
+
+            foreach ($Member in $Members) {
+                $MemberCounter++
+
+                $MemberName = $Member.SamAccountName
+
+				$MemberProgressParams = @{
+                    'Id' = 2
+                    'ParentId' = 1
+                    'Activity' = "Processing member $MemberCounter of $MemberCount"
+                    'Status' = $MemberName
+                }
+                if ($MemberCount.GetType() -eq [int]) {
+                    $MemberProgressParams.Add('PercentComplete', ($MemberCounter / $MemberCount) * 100)
+                }
+                Write-Progress @MemberProgressParams
+
+                if ($Member.objectClass -eq 'user') {
+                    Write-Verbose "$MemberName is a user"
+
+                    if (-not $Users.ContainsKey($MemberName)) {
+                        Write-Verbose "Adding $MemberName to users list"
+                        $Users.Add($MemberName, @{})
+                    }
+
+                    Write-Verbose "Adding $($GroupName) to $MemberName's group list"
+                    $Users.($MemberName).Add($GroupName, $true)
+                } else {
+                    Write-Verbose "$MemberName is not a user"
+                }
+            }
+
+            Write-Progress -Id 2 -ParentId 1 -Activity "Processing members" -Completed
+        }
+
+        $ReportProgressParams = @{
+            'Id' = 1
+            'Activity' = 'Building report...'
+        }
+        Write-Progress @ReportProgressParams
+
+        $Results = @()
+
+        foreach ($User in $Users.GetEnumerator()) {
+            $ADUser = Get-ADUser -Identity $User.Name -Properties @(
+                'physicalDeliveryOfficeName', 'Office', 'Department', 'Company', 'City', 'telephoneNumber'
+                )
+
+            $UserObject = New-Object psobject -Property @{
+                UserId = $User.Name
+                Email = $ADUser.UserPrincipalName
+                Phone = $ADUser.telephoneNumber
+                FullName = $ADUser.Name
+                Enabled = $ADUser.Enabled
+                PhysicalOffice = $ADUser.physicalDeliveryOfficeName
+                Office = $ADUser.Office
+                Department = $ADUser.Department
+                Company = $ADUser.Company
+                City = $ADUser.City
+            }
+
+            foreach ($Group in $Groups) {
+                $UserObject | Add-Member -MemberType NoteProperty -Name $Group.Name -Value ''
+
+                if ($User.Value.ContainsKey($Group.Name)) {
+                    $UserObject.($Group.Name) = 'x'
+                }
+            }
+
+            $Results += $UserObject
+        }
+    }
+
+    end {
+        if ($SaveToCsv) { $Results | Export-Csv -Path $SaveToCsv -NoTypeInformation }
+        $Results
+    }
+}

AD/Get-DisabledUser.ps1

@@ -0,0 +1,43 @@
+#Requires –Version 3
+
+function Get-DisabledUser {
+	param (
+		[Parameter(Mandatory = $true)]
+		[string]$UsersFilePath,
+
+		[Parameter(Mandatory = $false)]
+		[ValidateSet('Email', 'FullName', 'UserID')]
+		[string]$ListType = 'Email'
+	)
+
+	begin {
+		Import-Module ActiveDirectory
+
+		$Users = Get-Content -Path $UsersFilePath
+		$ADUsers = Get-ADUser -SearchBase 'OU=Users,DC=company,DC=LOCAL' -Filter *
+		$Results = @()
+	}
+
+	process {
+		foreach ($User in $Users) {
+			switch ($ListType) {
+				'Email' { $SearchProperty = 'UserPrincipalName' }
+				'FullName' { $SearchProperty = 'Name' }
+				'UserID' { $SearchProperty = 'SamAccountName' }
+			}
+
+			$FoundUser = $ADUsers | Where-Object { $_.$SearchProperty -eq $User }
+
+			$Results += New-Object -TypeName PSObject -Property @{
+				SearchProperty = $User
+				UserPrincipalName = $FoundUser.UserPrincipalName
+				Name = $FoundUser.Name
+				SamAccountName = $FoundUser.SamAccountName
+				Enabled = if ($FoundUser.Enabled) { $true } else { $false }
+			}
+		}
+		$Results | Sort-Object Enabled | Format-Table -AutoSize
+	}
+}
+
+Get-DisabledUser -UsersFilePath C:\TestUsers.txt -ListType Email

AD/Reset-ADLastPasswordSetTime.ps1

@@ -0,0 +1,5 @@
+$creds = Get-Credential
+
+$Me = Get-ADUser -Filter * | Where-Object -Property SamAccountName -Like userid*
+$Me | Set-ADUser -ChangePasswordAtLogon $true -Credential $creds
+$Me | Set-ADUser -ChangePasswordAtLogon $false -Credential $creds

AD/Test-Credential.ps1

@@ -0,0 +1,65 @@
+<# 
+.DESCRIPTION  
+    Simulates an Authentication Request in a Domain envrionment using a PSCredential Object. Returns $true if both Username and Password pair are valid.
+.VERSION
+    1.3
+.GUID
+    6a18515f-73d3-4fb4-884f-412395aa5054
+.AUTHOR
+    Thomas Malkewitz @dotps1
+.TAGS
+    PSCredential, Credential
+.RELEASENOTES
+    Updated $Domain default value to $Credential.GetNetworkCredential().Domain.
+    Added support for multipul credential objects to be passed into $Credential.
+.PROJECTURI
+    http://dotps1.github.io
+.NOTES
+    Slight modifications by Nick
+ #>
+
+Function Test-Credential {
+    [OutputType([Bool])]
+
+    Param (
+        [Parameter(
+            Mandatory = $true,
+            ValueFromPipeLine = $true,
+            ValueFromPipelineByPropertyName = $true
+        )]
+        [Alias('PSCredential')] 
+        [ValidateNotNull()]
+        [System.Management.Automation.PSCredential]
+        [System.Management.Automation.Credential()]
+        $Credential,
+
+        [Parameter()]
+        [String]
+        $Domain = $Credential.GetNetworkCredential().Domain
+    )
+
+    Begin {
+        [System.Reflection.Assembly]::LoadWithPartialName("System.DirectoryServices.AccountManagement") |
+            Out-Null
+
+        $principalContext = New-Object System.DirectoryServices.AccountManagement.PrincipalContext(
+            [System.DirectoryServices.AccountManagement.ContextType]::Domain, $Domain
+        )
+    }
+
+    Process {
+        foreach ($item in $Credential) {
+            $networkCredential = $Credential.GetNetworkCredential()
+
+            Write-Output -InputObject $(
+                $principalContext.ValidateCredentials(
+                    $networkCredential.UserName, $networkCredential.Password
+                )
+            )
+        }
+    }
+
+    End {
+        $principalContext.Dispose()
+    }
+}

AD/Update-ADMFARegistrationGroup.ps1

@@ -0,0 +1,18 @@
+Import-Module ActiveDirectory
+
+# Get all MSO users and their MFA status, convert into AD users
+$MFAUsers = . "MSO\Get-MFAEnabledUser.ps1"
+$RegisteredUsers = $MFAUsers | Where-Object -Property DefaultMethod -NE $null | ForEach-Object {
+    Get-ADUser -Filter "UserPrincipalName -eq '$($_.UserPrincipalName)'"
+}
+
+# Get the group that holds unregistered MFA users and the users within
+$UnregisteredGroup = Get-ADGroup -Identity 'MFA Registration Incomplete'
+$UnregisteredUsers = $UnregisteredGroup | Get-ADGroupMember | Get-ADUser
+
+# Find users in the group that have a default MFA method
+$UsersToRemove = $UnregisteredUsers | Compare-Object -ReferenceObject $RegisteredUsers -IncludeEqual |
+Where-Object -Property SideIndicator -eq '=='
+
+# Remove users with a default MFA method
+Remove-ADGroupMember -Identity $UnregisteredGroup -Members $UsersToRemove.InputObject

Application Management/Get-AADConnectVersion.ps1

@@ -0,0 +1,7 @@
+$Creds = Get-Credential
+$DirSyncServer = 'dirsync01'
+
+Invoke-Command -ComputerName $DirSyncServer -Credential $Creds -ScriptBlock {
+    $RegKey = "HKLM:\Software\Microsoft\Windows\CurrentVersion\Uninstall\*"
+    Get-ItemProperty -Path $RegKey | Where-Object -Property DisplayName -EQ 'Microsoft Azure AD Connect'
+} | Select-Object -Property DisplayName, PSPath, Version, DisplayVersion | Format-List

CaseWare/New-CWSyncServer.ps1

@@ -0,0 +1,41 @@
+function New-CWSyncServer {
+    <#
+        .DESCRIPTION
+        Add SmartSync server to CaseWare Working Papers.
+
+        .PARAMETER HostName
+        Host name of SmartSync server.
+
+        .PARAMETER Label
+        Friendly name of SmartSync server as it will appear in CaseWare Working Papers.
+
+        .EXAMPLE
+        New-CWSyncServer site01.company.com
+
+        .NOTES
+        Created by Nick Rodriguez
+        Adds new SmartSync server to registry that will appear in CaseWare Working Papers.
+    #>
+    [CmdletBinding(SupportsShouldProcess = $true)]
+    Param(
+        [Parameter(Mandatory = $true)]
+        [String]
+        $HostName,
+
+        [Parameter(Mandatory = $false)]
+        [String]
+        $FriendlyName
+    )
+
+    # Create the site key
+    $RegPath = 'HKCU:\SOFTWARE\CaseWare International\Working Papers\*\SyncServer'
+    if (-not (Test-Path -Path "$RegPath\{$HostName}")) { New-Item -Path $RegPath -Name "{$HostName}" }
+
+    # Set the two site key properties
+    Set-ItemProperty -Path "$RegPath\{$HostName}" -Name Host -Value $HostName
+    Set-ItemProperty -Path "$RegPath\{$HostName}" -Name Label -Value $FriendlyName
+
+    # Validate with SCCM friendly exit codes
+    $SiteKey = Get-ItemProperty -Path "$RegPath\{$HostName}"
+    if ($SiteKey.Host -eq $HostName -and $SiteKey.Label -eq $FriendlyName) { exit 0 } else { exit 999 }
+}