mirror of
https://github.com/MLBZ521/MacAdmin.git
synced 2026-06-11 03:40:32 +01:00
v0.1 = Initial Version
+ This is the initial version of this script; it is complied from multiple other scripts that individually pulled details for each criteria. + More to come!
This commit is contained in:
Zack T
222
Jamf Pro/Reporting/jamf_Reporting.ps1
Normal file
222
Jamf Pro/Reporting/jamf_Reporting.ps1
Normal file
@@ -0,0 +1,222 @@
|
||||
<#
|
||||
|
||||
Script Name: jamf_Reporting.ps1
|
||||
By: Zack Thompson / Created: 11/6/2018
|
||||
Version: 0.1 / Updated: 11/6/2018 / By: ZT
|
||||
|
||||
Description: This script is used to generate reports on specific configurations.
|
||||
|
||||
#>
|
||||
|
||||
Write-Host "jamf_Reporting Process: START"
|
||||
|
||||
# ============================================================
|
||||
# Define Variables
|
||||
# ============================================================
|
||||
|
||||
# Setup Credentials
|
||||
$jamfAPIUser = $(Read-Host "JPS Account")
|
||||
$jamfAPIPassword = $(Read-Host -AsSecureString "JPS Password")
|
||||
$APIcredentials = New-Object –TypeName System.Management.Automation.PSCredential –ArgumentList $jamfAPIUser, $jamfAPIPassword
|
||||
|
||||
# Setup API URLs
|
||||
$jamfPS = "https://jps.company.com:8443"
|
||||
$getPolicies = "${jamfPS}/JSSResource/policies/createdBy/jss"
|
||||
$getPolicy = "${jamfPS}/JSSResource/policies/id"
|
||||
|
||||
$fileDate=$(Get-Date -Format FileDateTime)
|
||||
|
||||
# Set the session to use TLS 1.2
|
||||
[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
|
||||
|
||||
# ============================================================
|
||||
# Functions
|
||||
# ============================================================
|
||||
|
||||
function policyDisabled($objectOf_Policy) {
|
||||
#Write-Host "policyDisabled $(${objectOf_Policy}.policy.general.id)"
|
||||
if ( $objectOf_Policy.policy.general.enabled -eq $False) {
|
||||
Write-host " -> Is Disabled"
|
||||
policyOutputObject $objectOf_Policy "policy_Disabled"
|
||||
}
|
||||
}
|
||||
|
||||
function policyNoScope($objectOf_Policy) {
|
||||
if ( $objectOf_Policy.policy.scope.all_computers -eq $False -and
|
||||
$objectOf_Policy.policy.scope.computers.Length -eq 0 -and
|
||||
$objectOf_Policy.policy.scope.computer_groups.Length -eq 0 -and
|
||||
$objectOf_Policy.policy.scope.buildings.Length -eq 0 -and
|
||||
$objectOf_Policy.policy.scope.departments.Length -eq 0 -and
|
||||
$objectOf_Policy.policy.scope.limit_to_users.user_groups.Length -eq 0 -and
|
||||
$objectOf_Policy.policy.scope.limitations.users.Length -eq 0 -and
|
||||
$objectOf_Policy.policy.scope.limitations.user_groups.Length -eq 0 -and
|
||||
$objectOf_Policy.policy.scope.limitations.network_segments.Length -eq 0 -and
|
||||
$objectOf_Policy.policy.scope.limitations.ibeacons.Length -eq 0 -and
|
||||
$objectOf_Policy.policy.scope.exclusions.computers.Length -eq 0 -and
|
||||
$objectOf_Policy.policy.scope.exclusions.computer_groups.computer_group.Length -eq 0 -and
|
||||
$objectOf_Policy.policy.scope.exclusions.buildings.Length -eq 0 -and
|
||||
$objectOf_Policy.policy.scope.exclusions.departments.Length -eq 0 -and
|
||||
$objectOf_Policy.policy.scope.exclusions.users.Length -eq 0 -and
|
||||
$objectOf_Policy.policy.scope.exclusions.user_groups.Length -eq 0 -and
|
||||
$objectOf_Policy.policy.scope.exclusions.network_segments.Length -eq 0 -and
|
||||
$objectOf_Policy.policy.scope.exclusions.ibeacons.Length -eq 0 ) {
|
||||
|
||||
Write-host " -> Has No Scope"
|
||||
policyOutputObject $objectOf_Policy "policy_NoScope"
|
||||
}
|
||||
}
|
||||
|
||||
function policyNoConfig($objectOf_Policy) {
|
||||
if ( $objectOf_Policy.policy.package_configuration.packages.size -eq 0 -and
|
||||
$objectOf_Policy.policy.scripts.size -eq 0 -and
|
||||
$objectOf_Policy.policy.printers.size -eq 0 -and
|
||||
$objectOf_Policy.policy.dock_items.size -eq 0 -and
|
||||
$objectOf_Policy.policy.account_maintenance.accounts.size -eq 0 -and
|
||||
$objectOf_Policy.policy.account_maintenance.directory_bindings.size -eq 0 -and
|
||||
$objectOf_Policy.policy.account_maintenance.management_account.action -eq "doNotChange" -and
|
||||
$objectOf_Policy.policy.account_maintenance.open_firmware_efi_password.of_mode -eq "none" -and
|
||||
$objectOf_Policy.policy.maintenance.recon -eq $False -and
|
||||
$objectOf_Policy.policy.maintenance.reset_name -eq $False -and
|
||||
$objectOf_Policy.policy.maintenance.install_all_cached_packages -eq $False -and
|
||||
$objectOf_Policy.policy.maintenance.heal -eq $False -and
|
||||
$objectOf_Policy.policy.maintenance.prebindings -eq $False -and
|
||||
$objectOf_Policy.policy.maintenance.permissions -eq $False -and
|
||||
$objectOf_Policy.policy.maintenance.byhost -eq $False -and
|
||||
$objectOf_Policy.policy.maintenance.system_cache -eq $False -and
|
||||
$objectOf_Policy.policy.maintenance.user_cache -eq $False -and
|
||||
$objectOf_Policy.policy.maintenance.verify -eq $False -and
|
||||
$objectOf_Policy.policy.files_processes.search_by_path.Length -eq 0 -and
|
||||
$objectOf_Policy.policy.files_processes.delete_file -eq $False -and
|
||||
$objectOf_Policy.policy.files_processes.locate_file.Length -eq 0 -and
|
||||
$objectOf_Policy.policy.files_processes.update_locate_database -eq $False -and
|
||||
$objectOf_Policy.policy.files_processes.spotlight_search.Length -eq $False -and
|
||||
$objectOf_Policy.policy.files_processes.search_for_process.Length -eq 0 -and
|
||||
$objectOf_Policy.policy.files_processes.kill_process -eq $False -and
|
||||
$objectOf_Policy.policy.files_processes.run_command.Length -eq 0 -and
|
||||
$objectOf_Policy.policy.disk_encryption.action -eq "none" ) {
|
||||
|
||||
Write-host " -> Does Nothing"
|
||||
policyOutputObject $objectOf_Policy "policy_NoConfiguration"
|
||||
}
|
||||
}
|
||||
|
||||
function policyNoCategory($objectOf_Policy) {
|
||||
if ( $objectOf_Policy.policy.general.category.name -eq "No category assigned" ) {
|
||||
Write-host " -> Has No Category"
|
||||
policyOutputObject $objectOf_Policy "policy_NoCategory"
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
function policySSNoDescription($objectOf_Policy) {
|
||||
if ( $objectOf_Policy.policy.self_service.use_for_self_service -eq $True -and $objectOf_Policy.policy.self_service.self_service_description -eq $null) {
|
||||
Write-host " -> Has No Description"
|
||||
policyOutputObject $objectOf_Policy "policy_SSNoDescription"
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
function policySSNoIcon($objectOf_Policy) {
|
||||
if ( $objectOf_Policy.policy.self_service.use_for_self_service -eq $True -and $objectOf_Policy.policy.self_service.self_service_icon -eq $null) {
|
||||
Write-host " -> Has No Icon"
|
||||
policyOutputObject $objectOf_Policy "policy_SSNoIcon"
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
|
||||
function policyOutputObject($objectOf_Policy, $condition) {
|
||||
$outputObject = New-Object PSObject -Property @{
|
||||
id = $objectOf_Policy.policy.general.id
|
||||
name = $objectOf_Policy.policy.general.name
|
||||
Site = $objectOf_Policy.policy.general.site.name
|
||||
selfService = $objectOf_Policy.policy.self_service.use_for_self_service
|
||||
}
|
||||
|
||||
output $outputObject $condition
|
||||
}
|
||||
|
||||
|
||||
|
||||
function output($outputObject, $condition) {
|
||||
# Export each Policy object to a file.
|
||||
Export-Csv -InputObject $outputObject -Path "\\Mac\Home\Desktop\testing\Reporting\${condition}_${fileDate}.csv" -Append -NoTypeInformation
|
||||
# Export-Csv -InputObject $policyNodes -Path "${workingDirectory}\AllPolicies_${fileDate}.csv" -Append -NoTypeInformation
|
||||
}
|
||||
|
||||
|
||||
function funcToRun($objectOf_Policy) {
|
||||
#Write-Host "FunctionToRun $(${objectOf_Policy}.policy.general.id)"
|
||||
policyDisabled $objectOf_Policy
|
||||
policyNoScope $objectOf_Policy
|
||||
policyNoConfig $objectOf_Policy
|
||||
policyNoCategory $objectOf_Policy
|
||||
}
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
|
||||
# ============================================================
|
||||
# Bits Staged...
|
||||
# ============================================================
|
||||
|
||||
# Verify credentials that were provided by doing an API call and checking the result to verify permissions.
|
||||
#Write-Host "Verifying API credentials..."
|
||||
#Try {
|
||||
# $Response = Invoke-RestMethod -Uri "${jamfPS}/JSSResource/jssuser" -Method Get -Credential $APIcredentials -ErrorVariable RestError -ErrorAction SilentlyContinue
|
||||
#}
|
||||
#Catch {
|
||||
# $statusCode = $_.Exception.Response.StatusCode.value__
|
||||
# $statusDescription = $_.Exception.Response.StatusDescription
|
||||
#
|
||||
# If ($statusCode -notcontains "200") {
|
||||
# Write-Host "ERROR: Invalid Credentials or permissions."
|
||||
# Write-Host "Response: ${statusCode}/${statusDescription}"
|
||||
# Write-Host "jamf_MoveSites Process: FAILED"
|
||||
# Exit
|
||||
# }
|
||||
#}
|
||||
|
||||
Write-Host "API Credentials Valid -- continuing..."
|
||||
|
||||
#$saveDirectory = ($(Read-Host "Save Directiory") -replace '"')
|
||||
|
||||
# Get all the Policies
|
||||
$objectOf_AllPolicies = Invoke-RestMethod -Uri "${getPolicies}" -Method Get -Headers @{"accept"="application/xml"} -Credential $APIcredentials
|
||||
|
||||
|
||||
#$objectOf_PoliciesDetails = @()
|
||||
$objectOf_AllPoliciesDetails = New-Object System.Collections.Arraylist
|
||||
$Position=1
|
||||
|
||||
# Loop through each Policy
|
||||
ForEach ($policy in $objectOf_AllPolicies.policies.policy) {
|
||||
Write-Progress -Activity "Getting all Policy Configurations..." -Status "Policy: $(${policy}.id) / $(${policy}.name)" -PercentComplete (($Position/$objectOf_AllPolicies.policies.policy.Count)*100)
|
||||
|
||||
# Get the configuration of each Policy
|
||||
$objectOf_Policy = Invoke-RestMethod -Uri "${getPolicy}/$(${policy}.id)" -Method Get -Headers @{"accept"="application/xml"} -Credential $APIcredentials
|
||||
$objectOf_AllPoliciesDetails.add($objectOf_Policy) | Out-Null
|
||||
$Position++
|
||||
}
|
||||
|
||||
$Position=1
|
||||
|
||||
ForEach ($objectOf_Policy in $objectOf_AllPoliciesDetails) {
|
||||
Write-Progress -Activity "Testing all Policies..." -Status "Policy: $(${objectOf_Policy}.policy.general.id) / $(${objectOf_Policy}.policy.general.name)" -PercentComplete (($Position/$objectOf_AllPoliciesDetails.Count)*100)
|
||||
Write-host "Policy ID $(${objectOf_Policy}.policy.general.id):"
|
||||
funcToRun $objectOf_Policy
|
||||
$Position++
|
||||
}
|
||||
|
||||
Write-Host "All Policies have been processed."
|
||||
Write-Host "jamf_Reporting Process: COMPLETE"
|
||||
Reference in New Issue
Block a user