Uncategorised – SCCMOG – Deployment Blog

30th November 201830th November 2018

Windows 10 Configure User Experience Offline – MDT SCCM OSD -VBScript

So currently I am working on an Government Education site comprising of just under 40 schools. There was a requirement to remove/hide Microsoft’s Edge browser from the image being rolled out to the users. The reasoning behind this is down to a monitoring tool used by the education department that does not support Edge and therefor policies would be broken…

Anyway I hunted around on our favourite resource for a solution that would not break the image entirely by removing one of it core features.

Eventually I found these 4 registry keys that did the trick:

KEY: HKEY_LOCAL_MACHINE\NewOS\Microsoft\Windows\CurrentVersion\Explorer
Name: DisableEdgeDesktopShortcutCreation 
Value: 1

KEY: HKEY_LOCAL_MACHINE\NewOS\Microsoft\Windows\CurrentVersion\Explorer

Name: DisableEdgeDesktopShortcutCreation

Value: 1

KEY: HKEY_LOCAL_MACHINE\NewOS\Policies\Microsoft\MicrosoftEdge\Main
Name: PreventFirstRunPage
Value: 1

KEY: HKEY_LOCAL_MACHINE\NewOS\Policies\Microsoft\MicrosoftEdge\Main

Name: PreventFirstRunPage

Value: 1

KEY: HKEY_LOCAL_MACHINE\NewOS\Policies\Microsoft\MicrosoftEdge\Main
Name: AllowPrelaunch 
Value: 0

KEY: HKEY_LOCAL_MACHINE\NewOS\Policies\Microsoft\MicrosoftEdge\Main

Name: AllowPrelaunch

Value: 0

KEY: HKEY_LOCAL_MACHINE\NewOS\Policies\Microsoft\MicrosoftEdge\TabPreloader\AllowTabPreloading
Name: AllowTabPreloading 
Value: 0

KEY: HKEY_LOCAL_MACHINE\NewOS\Policies\Microsoft\MicrosoftEdge\TabPreloader\AllowTabPreloading

Name: AllowTabPreloading

Value: 0

Next was to figure out how to inject these into my reference image before it was laid onto the VM for automated customisation. So I remembered a great script by Johan Arwidmark I use all the time for turning off Appx package updates during a reference image capture task sequence (can break sysprep if allowed).

Anyway after a bit of modification to load the Software registry hive offline instead this is what I came up with. There is also some commented out portions here that may come in handy:

Github: Config-Win10-Offline-UE.wsf

MDT Setup

First download the script and save it into you deployment share “Scripts” folder:

J:\<YOUR_DEPLOYMENT_SHARE>\Scripts\Config-Win10-Offline-UE.wsf

1	J:\<YOUR_DEPLOYMENT_SHARE>\Scripts\Config-Win10-Offline-UE.wsf

Then Open up your chosen Task Sequence in MDT and just before the “Inject Drivers” step under the “Post Install Group” and a new “Run Commmand Line Step”.
Name it for example: Configure User Experience
Then use the following command line:

cscript.exe "%SCRIPTROOT%\Config-Win10-Offline-UE.wsf"

1	cscript.exe "%SCRIPTROOT%\Config-Win10-Offline-UE.wsf"

Example:

SCCM Setup

For SCCM you must be using the MDT integration (if you’re not… Start now!), you can make it work without it but I will not cover that here.
Find your current MDT Toolkit Package that is associated with the Task Sequence you would like to configure power settings in.
Open the “Source” location of your toolkit package, then open the scripts folder.

Once inside the scripts folder copy the “Config-Win10-Offline-UE.wsf” into it. Now, update the Package in ConfigMgr.
Next we need to add the step to the task sequence. It must go after a “Use Toolkit Package” step and before your Driver injection step in the task sequence. (If you have a reboot remember to add another use “Toolkit package”.)

Create a new “Run Command Line Step” and add the below command.

cscript.exe "%deployroot%\scripts\Config-Win10-Offline-UE.wsf"

1	cscript.exe "%deployroot%\scripts\Config-Win10-Offline-UE.wsf"

And that is it. Your ConfigMgr or MDT Task sequence is now setup to configure the user environment before the machine boots!

Anyway as always, script is provided as is and if you do mod it, there is a line to add your name.

27th September 2018

Get and Set ConfigMgr Machine Variables with WMI and PowerShell Functions

So I’m working on a client site at the moment with a difficult to automate OU structure. Essentially I need to be able to add and get ConfigMgr machine variables easily and without the need of the PowerShell module.

So as we do… I went to google, found a couple of nice hints then though I’d write them into functions to be easily re-used.

The beauty of these functions is they can be run from anywhere in your site or during a task sequence as they use WMI.
This means as long as the account running the script has access to the ConfigMgr site you can play with variables!

Anyway download the most up to date versions of the functions from the SCCMOG GitHub Repo:

Scripts:

#Get-ConfigMgrMachineVariableWMI
#SCCMOG.com Richie Schuster - 27/09/18
#Gets the value of a ConfigMgr Objects Variable
#E.g <Get-ConfigMgrMachineVariable -Siteserver $Siteserver -SiteCode $SiteCode -MachineName TUDOR -VarName "Hello2">
#Returns blank string if not found and value if found.
Function Get-ConfigMgrMachineVariable{
	param(
		[parameter(Mandatory=$true, HelpMessage="Site server FQDN")]
		[ValidateNotNullOrEmpty()]
		[string]$Siteserver,

		[parameter(Mandatory=$true, HelpMessage="SCCM Site Code")]
		[ValidateNotNullOrEmpty()]
		[string]$SiteCode,

		[parameter(Mandatory=$true, HelpMessage="ConfigMgr Machine Object to add Variable to")]
		[ValidateNotNullOrEmpty()]
		[string]$MachineName,

		[parameter(Mandatory=$true, HelpMessage="Variable Name to query for.")]
		[ValidateNotNullOrEmpty()]
		[string]$VarName
	)
    #Set to null
    $objMachineSettings = $null
    #Get machine object from ConfigMgr
    $objComputer = gwmi -computername $($Siteserver) -namespace "root\sms\site_$($SiteCode)" -class "sms_r_system" | where{$_.Name -eq $MachineName}
    #Get settings from ConfigMgr
    $objMachineSettings = gwmi -computername $($Siteserver) -namespace "root\sms\site_$($SiteCode)" -class "sms_machinesettings" | where{$_.ResourceID -eq $objComputer.ResourceID}
    If ($objMachineSettings -ne $null){
        $objMachineSettings.get()
        If ($objMachineSettings.MachineVariables | where{$_.Name -eq "$VarName"}) {
            $variable = (($objMachineSettings.MachineVariables | where{$_.Name -eq "$VarName"}).Value).Trim()
            return $variable
        }
        Else {
            $variable = ""
            return $variable
        }
    }
    else {
        $variable = ""
        return $variable
    }   
}

#Get-ConfigMgrMachineVariableWMI

#SCCMOG.com Richie Schuster - 27/09/18

#Gets the value of a ConfigMgr Objects Variable

#E.g <Get-ConfigMgrMachineVariable -Siteserver $Siteserver -SiteCode $SiteCode -MachineName TUDOR -VarName "Hello2">

#Returns blank string if not found and value if found.

Function Get-ConfigMgrMachineVariable{

param(

[parameter(Mandatory=$true, HelpMessage="Site server FQDN")]

[ValidateNotNullOrEmpty()]

[string]$Siteserver,

[parameter(Mandatory=$true, HelpMessage="SCCM Site Code")]

[ValidateNotNullOrEmpty()]

[string]$SiteCode,

[parameter(Mandatory=$true, HelpMessage="ConfigMgr Machine Object to add Variable to")]

[ValidateNotNullOrEmpty()]

[string]$MachineName,

[parameter(Mandatory=$true, HelpMessage="Variable Name to query for.")]

[ValidateNotNullOrEmpty()]

[string]$VarName

)

#Set to null

$objMachineSettings = $null

#Get machine object from ConfigMgr

$objComputer = gwmi -computername $($Siteserver) -namespace "root\sms\site_$($SiteCode)" -class "sms_r_system" | where{$_.Name -eq $MachineName}

#Get settings from ConfigMgr

$objMachineSettings = gwmi -computername $($Siteserver) -namespace "root\sms\site_$($SiteCode)" -class "sms_machinesettings" | where{$_.ResourceID -eq $objComputer.ResourceID}

If ($objMachineSettings -ne $null){

$objMachineSettings.get()

If ($objMachineSettings.MachineVariables | where{$_.Name -eq "$VarName"}) {

$variable = (($objMachineSettings.MachineVariables | where{$_.Name -eq "$VarName"}).Value).Trim()

return $variable

}

Else {

$variable = ""

return $variable

}

else {

$variable = ""

return $variable

}

#Set-ConfigMgrMachineVariableWMI
#SCCMOG.com Richie Schuster - 27/09/18
#Gets the value of a ConfigMgr Objects Variable
#E.g <Set-ConfigMgrMachineVariable -Siteserver ROARY-CM-01 -SiteCode ROR -MachineName TUDOR -VarName Hello2 -VarValue Really -VarMasked $false>
#Sets ConfigMgr Variable - will add a new variable if others already set.
Function Set-ConfigMgrMachineVariable {
	param(
		[parameter(Mandatory=$true, HelpMessage="Site server FQDN")]
		[ValidateNotNullOrEmpty()]
		[string]$Siteserver,

		[parameter(Mandatory=$true, HelpMessage="SCCM Site Code")]
		[ValidateNotNullOrEmpty()]
		[string]$SiteCode,

		[parameter(Mandatory=$true, HelpMessage="ConfigMgr Machine Object to add Variable to")]
		[ValidateNotNullOrEmpty()]
		[string]$MachineName,

		[parameter(Mandatory=$true, HelpMessage="Variable Name")]
		[ValidateNotNullOrEmpty()]
		[string]$VarName,

		[parameter(Mandatory=$true, HelpMessage="Variable Value")]
		[ValidateNotNullOrEmpty()]
		[string]$VarValue,

		[parameter(Mandatory=$false, HelpMessage="Mask variable - `$true or `$false - Default is `$false")]
		[ValidateNotNullOrEmpty()]
		[bool]$VarMasked = $false
	)
    #Set to null
    $objMachineSettings = $null
    #Get machine resource id
    $objComputer = gwmi -computername $($Siteserver) -namespace "root\sms\site_$($SiteCode)" -class "sms_r_system" | where{$_.Name -eq $MachineName}
    #Get SMS Machine Settings Class
    $objSMSMachineSettings = [WmiClass]"\\$($Siteserver)\ROOT\SMS\site_$($SiteCode):SMS_MachineSettings"
    #Get SMS Machine settings Instances
    $objSMSMachineSettings.GetInstances() | Out-Null
    #Get Machine Settings
    $objMachineSettings = gwmi -computername $($Siteserver) -namespace "root\sms\site_$($SiteCode)" -class "sms_machinesettings" | where{$_.ResourceID -eq $objComputer.ResourceID}

    #test if variables already present
    If ($objMachineSettings -ne $null){
        $objMachineSettings.Get()  
        #Get new array index
        if ($objMachineSettings.MachineVariables.length -ne 0){
            $i = 0
            $newVarIndex = $i
            DO {
            $newVarIndex = $i + 1
            $i++
            } While ($i -le $objMachineSettings.MachineVariables.length - 1)
            $newVarIndex
        }
        else {
            $newVarIndex = 0
        }
        #Create the new emty variable
        $objMachineSettings.MachineVariables = $objMachineSettings.MachineVariables += [WmiClass]"\\$($Siteserver)\ROOT\SMS\site_$($SiteCode):SMS_MachineVariable"
        #get array of variables
        $arrayMachineVariables = $objMachineSettings.MachineVariables
        #set new variable
        $arrayMachineVariables[$newVarIndex].name=$varName
        $arrayMachineVariables[$newVarIndex].value=$VarValue
        $arrayMachineVariables[$newVarIndex].ismasked = $VarMasked
    }
    Else {
        #Create Machine instance
        $objMachineSettings = $objSMSMachineSettings.CreateInstance()
        #Create base properties
        $objMachineSettings.psbase.properties["ResourceID"].value = $($objComputer.ResourceID)
        $objMachineSettings.psbase.properties["SourceSite"].value = $($SiteCode)
        $objMachineSettings.psbase.properties["LocaleID"].value = 1033
        #Create empty variable
        $objMachineSettings.MachineVariables = $objMachineSettings.MachineVariables + [WmiClass]"\\$($Siteserver)\ROOT\SMS\site_$($SiteCode):SMS_MachineVariable"
        #get array of variables
        $arrayMachineVariables = $objMachineSettings.MachineVariables
        #set the new variable
        $arrayMachineVariables[0].name=$varName
        $arrayMachineVariables[0].value=$VarValue
        $arrayMachineVariables[0].ismasked = $VarMasked
    }
    # write the variables back to the machine object 
    $objMachineSettings.MachineVariables = $arrayMachineVariables
    #Save the new Variable
    $objMachineSettings.put()
}

#Set-ConfigMgrMachineVariableWMI

#SCCMOG.com Richie Schuster - 27/09/18

#Gets the value of a ConfigMgr Objects Variable

#E.g <Set-ConfigMgrMachineVariable -Siteserver ROARY-CM-01 -SiteCode ROR -MachineName TUDOR -VarName Hello2 -VarValue Really -VarMasked $false>

#Sets ConfigMgr Variable - will add a new variable if others already set.

Function Set-ConfigMgrMachineVariable {

param(

[parameter(Mandatory=$true, HelpMessage="Site server FQDN")]

[ValidateNotNullOrEmpty()]

[string]$Siteserver,

[parameter(Mandatory=$true, HelpMessage="SCCM Site Code")]

[ValidateNotNullOrEmpty()]

[string]$SiteCode,

[parameter(Mandatory=$true, HelpMessage="ConfigMgr Machine Object to add Variable to")]

[ValidateNotNullOrEmpty()]

[string]$MachineName,

[parameter(Mandatory=$true, HelpMessage="Variable Name")]

[ValidateNotNullOrEmpty()]

[string]$VarName,

[parameter(Mandatory=$true, HelpMessage="Variable Value")]

[ValidateNotNullOrEmpty()]

[string]$VarValue,

[parameter(Mandatory=$false, HelpMessage="Mask variable - `$true or `$false - Default is `$false")]

[ValidateNotNullOrEmpty()]

[bool]$VarMasked = $false

)

#Set to null

$objMachineSettings = $null

#Get machine resource id

$objComputer = gwmi -computername $($Siteserver) -namespace "root\sms\site_$($SiteCode)" -class "sms_r_system" | where{$_.Name -eq $MachineName}

#Get SMS Machine Settings Class

$objSMSMachineSettings = [WmiClass]"\\$($Siteserver)\ROOT\SMS\site_$($SiteCode):SMS_MachineSettings"

#Get SMS Machine settings Instances

$objSMSMachineSettings.GetInstances() | Out-Null

#Get Machine Settings

$objMachineSettings = gwmi -computername $($Siteserver) -namespace "root\sms\site_$($SiteCode)" -class "sms_machinesettings" | where{$_.ResourceID -eq $objComputer.ResourceID}

#test if variables already present

If ($objMachineSettings -ne $null){

$objMachineSettings.Get()

#Get new array index

if ($objMachineSettings.MachineVariables.length -ne 0){

$i = 0

$newVarIndex = $i

DO {

$newVarIndex = $i + 1

$i++

} While ($i -le $objMachineSettings.MachineVariables.length - 1)

$newVarIndex

}

else {

$newVarIndex = 0

}

#Create the new emty variable

$objMachineSettings.MachineVariables = $objMachineSettings.MachineVariables += [WmiClass]"\\$($Siteserver)\ROOT\SMS\site_$($SiteCode):SMS_MachineVariable"

#get array of variables

$arrayMachineVariables = $objMachineSettings.MachineVariables

#set new variable

$arrayMachineVariables[$newVarIndex].name=$varName

$arrayMachineVariables[$newVarIndex].value=$VarValue

$arrayMachineVariables[$newVarIndex].ismasked = $VarMasked

}

Else {

#Create Machine instance

$objMachineSettings = $objSMSMachineSettings.CreateInstance()

#Create base properties

$objMachineSettings.psbase.properties["ResourceID"].value = $($objComputer.ResourceID)

$objMachineSettings.psbase.properties["SourceSite"].value = $($SiteCode)

$objMachineSettings.psbase.properties["LocaleID"].value = 1033

#Create empty variable

$objMachineSettings.MachineVariables = $objMachineSettings.MachineVariables + [WmiClass]"\\$($Siteserver)\ROOT\SMS\site_$($SiteCode):SMS_MachineVariable"

#get array of variables

$arrayMachineVariables = $objMachineSettings.MachineVariables

#set the new variable

$arrayMachineVariables[0].name=$varName

$arrayMachineVariables[0].value=$VarValue

$arrayMachineVariables[0].ismasked = $VarMasked

}

# write the variables back to the machine object

$objMachineSettings.MachineVariables = $arrayMachineVariables

#Save the new Variable

$objMachineSettings.put()

}

13th July 2018

Disable RDP Windows 10 PowerShell Script Configuration Baseline SCCM

So I was setting up a KIOSK environment using Windows 10 1709 for a client recently and we wanted to take the route of applying as few GPOs as possible (as it should be in 2018)!

Ensuring that this stayed disabled was something that we decided to deploy using ConfigMgr Configuration Baselines.

So the Check compliance script is as follows:

##################################################################################################################
#
#  Author: Richie Schuster - C5 Alliance - SCCMOG.com
#  Date:   06/07/2018
#  Script: Action-CheckRDPCompliance.ps1
#  Usage: Powershell.exe -ExecutionPolicy Bypass -File .\Action-CheckRDPCompliance.ps1
#
##################################################################################################################

#Variables
$TSRegPath = "HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server"
$TSRegProperty = "fDenyTSConnections"
$RDPTcpRegPath = "HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp"
$RDPTcpRegProperty = "UserAuthentication"

#Set initial values
$TSSet = $True
$RDPTCPSet = $True
$RDPUserinTCPReturn = $True
$RDPUserinUDPReturn = $True
$RDPShadinTCPReturn = $True

#Test fDenyTSConnections state
$TSReturn = (Get-ItemProperty -Path $TSRegPath -Name $TSRegProperty -ErrorAction SilentlyContinue).fDenyTSConnections
If ($TSReturn -eq 1) {
    $TSSet = $false
}

#Test RDP-TCP State
$RDPTCPReturn = (Get-ItemProperty -Path $RDPTcpRegPath -Name $RDPTcpRegProperty -ErrorAction SilentlyContinue).UserAuthentication
If ($RDPTCPReturn -eq 0) {
    $RDPTCPSet = $false
}

#Get Firewall states
$RDPUserinTCPReturn = (Get-NetFirewallRule -Name $RDPUserinTCP -ErrorAction SilentlyContinue).Enabled
$RDPUserinUDPReturn = (Get-NetFirewallRule -Name $RDPUserinUDP -ErrorAction SilentlyContinue).Enabled
$RDPShadinTCPReturn = (Get-NetFirewallRule -Name $RDPShadinTCP -ErrorAction SilentlyContinue).Enabled

#Evaluate and report
If (!($RDPUserinTCPReturn) -and ($RDPUserinUDPReturn) -and ($RDPShadinTCPReturn) -and ($TSSet) -and ($RDPTCPSet)) {
    Write-Host "Compliant!"
}

##################################################################################################################

##################################################################################################################

# Author: Richie Schuster - C5 Alliance - SCCMOG.com

# Date: 06/07/2018

# Script: Action-CheckRDPCompliance.ps1

# Usage: Powershell.exe -ExecutionPolicy Bypass -File .\Action-CheckRDPCompliance.ps1

##################################################################################################################

#Variables

$TSRegPath = "HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server"

$TSRegProperty = "fDenyTSConnections"

$RDPTcpRegPath = "HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp"

$RDPTcpRegProperty = "UserAuthentication"

#Set initial values

$TSSet = $True

$RDPTCPSet = $True

$RDPUserinTCPReturn = $True

$RDPUserinUDPReturn = $True

$RDPShadinTCPReturn = $True

#Test fDenyTSConnections state

$TSReturn = (Get-ItemProperty -Path $TSRegPath -Name $TSRegProperty -ErrorAction SilentlyContinue).fDenyTSConnections

If ($TSReturn -eq 1) {

$TSSet = $false

}

#Test RDP-TCP State

$RDPTCPReturn = (Get-ItemProperty -Path $RDPTcpRegPath -Name $RDPTcpRegProperty -ErrorAction SilentlyContinue).UserAuthentication

If ($RDPTCPReturn -eq 0) {

$RDPTCPSet = $false

}

#Get Firewall states

$RDPUserinTCPReturn = (Get-NetFirewallRule -Name $RDPUserinTCP -ErrorAction SilentlyContinue).Enabled

$RDPUserinUDPReturn = (Get-NetFirewallRule -Name $RDPUserinUDP -ErrorAction SilentlyContinue).Enabled

$RDPShadinTCPReturn = (Get-NetFirewallRule -Name $RDPShadinTCP -ErrorAction SilentlyContinue).Enabled

#Evaluate and report

If (!($RDPUserinTCPReturn) -and ($RDPUserinUDPReturn) -and ($RDPShadinTCPReturn) -and ($TSSet) -and ($RDPTCPSet)) {

Write-Host "Compliant!"

}

##################################################################################################################

Ok, so now the check script is out the way, here is the remediation script:

##################################################################################################################
#
#  Author: Richie Schuster - C5 Alliance - SCCMOG.com
#  Date:   06/07/2018
#  Script: Action-RemediateRDPCompliance.ps1
#  Usage: Powershell.exe -ExecutionPolicy Bypass -File .\Action-RemediateRDPCompliance.ps1
#
##################################################################################################################

#Variables
$TSRegPath = "HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server"
$TSRegProperty = "fDenyTSConnections"
$RDPTcpRegPath = "HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp"
$RDPTcpRegProperty = "UserAuthentication"

#Remediate and Block RDP
Set-ItemProperty $TSRegPath -Name $TSRegProperty -Value 1 -Force
Set-ItemProperty $RDPTcpRegPath -Name $RDPTcpRegProperty -Value 0 -Force
Disable-NetFirewallRule -DisplayGroup "Remote Desktop"

#The End :)
##################################################################################################################

##################################################################################################################

# Author: Richie Schuster - C5 Alliance - SCCMOG.com

# Date: 06/07/2018

# Script: Action-RemediateRDPCompliance.ps1

# Usage: Powershell.exe -ExecutionPolicy Bypass -File .\Action-RemediateRDPCompliance.ps1

##################################################################################################################

#Variables

$TSRegPath = "HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server"

$TSRegProperty = "fDenyTSConnections"

$RDPTcpRegPath = "HKLM:\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp"

$RDPTcpRegProperty = "UserAuthentication"

#Remediate and Block RDP

Set-ItemProperty $TSRegPath -Name $TSRegProperty -Value 1 -Force

Set-ItemProperty $RDPTcpRegPath -Name $RDPTcpRegProperty -Value 0 -Force

Disable-NetFirewallRule -DisplayGroup "Remote Desktop"

#The End :)

##################################################################################################################

As Always scripts are as is, and if you do use them remeber where you got them from 😉

If you would like to see the setup of this baseline let me know in the comments below.

Cheers,

SCCMOG

14th June 201815th June 2018

OSD Task Seqeunce High Performance – Native PowerCFG – VBS – MDT -SCCM

So like a lot of ConfigMgr Admins out there I strive to produce the fastest and most robust task sequences I can. This obviously led me down the path of configuring the Power Settings on the OS during deployment and capture phases.

The issue that I found is probably like many of you have and that is that it requires exporting the native “PowerCFG.exe” from each version of the OS that you would like to dynamically change the power configuration during Operating System Deployment.

So Jack and I were discussing why… in short… do we not use the “PowerCFG.exe” that is is already in the OS that we are configuring. Anyway after a little persuasion we came up with this little beauty of a script. This script will also create a CMTrace “Log” using its name in the Log folder that is currently in use in the Task sequence.

Setup is simple:

MDT Setup

For MDT just place it into the Scripts folder of you “Deployment Share”.”

Deployment Share Root

"<YourDeploymentShareDrive>:\<DeploymentShareRoot>\Scripts\Set-PowerCFG.wsf"

1

"<YourDeploymentShareDrive>:\<DeploymentShareRoot>\Scripts\Set-PowerCFG.wsf"
You can then call this during any stage of you Reference image capture i.e. WinPE or full OS phase to set the power cfg with these below Command Lines:

MDT High Performance

"%ScriptRoot%\Set-PowerCFG.wsf" /High

1

"%ScriptRoot%\Set-PowerCFG.wsf" /High

MDT Balanced Performance Profile

"%ScriptRoot%\Set-PowerCFG.wsf" /Bal

1

"%ScriptRoot%\Set-PowerCFG.wsf" /Bal

SCCM Setup

For SCCM you must be using the MDT integration (if you’re not… Start now!), you can make it work without it but I will not cover that here.
Find your current MDT Toolkit Package that is associated with the Task Sequence you would like to configure power settings in.
Open the “Source” location of your toolkit package, then open the scripts folder.

Once inside the scripts folder copy the “Set-PowerCFG.wsf” into it.

- Now, update the Package in ConfigMgr.
- Next we need to add the step to the task sequence. It must go after the “Use Toolkit Package” step in the task sequence. (If you have a reboot and remember to add another use “Toolkit package”.)
- Create a new “Run Command Line Step” and add one of the below commands.

cscript.exe "%deployroot%\scripts\Set-PowerCFG.wsf" /High

1	cscript.exe "%deployroot%\scripts\Set-PowerCFG.wsf" /High

cscript.exe "%deployroot%\scripts\Set-PowerCFG.wsf" /Bal

1	cscript.exe "%deployroot%\scripts\Set-PowerCFG.wsf" /Bal

And that is it. Your Task sequence will now set the Power Configuration Profile using the current OS’s native “Powercfg.exe”

Anyway as always, script is provided as is and if you do mod it, there is a line to add your name.

The Script:

<job id="Set-PowerCFG">
<script language="VBScript" src="ZTIUtility.vbs"/>
<script language="VBScript">
 
' //***************************************************************************
' // ***** Script Header *****
' //
' // Solution: Solution Accelerator for Microsoft Deployment
' // File: Set-PowerCFG.wsf
' // Requirements: ZTIUtility.vbs Must be located in the same folder id running from ConfigMGR.
' // Author: SCCMOG Richie Schuster - SCCMOG.com
' // Moddedby: YOURNAMEHERE
' // Date: 21/03/2018
' // Purpose:  Script sets power profile during OS deployment - Can be run in WinPE or full OS.
' //
' // Usage: cscript Set-PowerConfig.wsf [/High] - Sets high performance | [/Bal] - Sets balanced performance. [/debug:true] 
' //
' // Customer Build Version: 1.0.0
' // Customer Script Version: 1.0.0
' // Customer History:
' //
' // ***** End Header *****
' //***************************************************************************
 
'//----------------------------------------------------------------------------
'//
'// Global constant and variable declarations
'//
'//----------------------------------------------------------------------------
 
'Option Explicit
Dim strPwrBalanced	: strPwrBalanced	= "381b4222-f694-41f0-9685-ff5bb260df2e"
Dim strPwrHighPerf	: strPwrHighPerf	= "8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c"
Dim strPwrCFGexe	: strPwrCFGexe		= "powercfg.exe"
Dim strPwrCFGswitch : strPwrCFGswitch	= " /S "
Dim strPwrCFGFolder : strPwrCFGFolder	= "PowerCFG"
Dim strWmessage		: strWmessage		= "Please enter one or more arguments 'E.G : /High for High Performance Profile' or '/Bal for Balanced Profile'"
Dim strWindir		: strWindir			= oShell.ExpandEnvironmentStrings("%Windir%")
Dim strSysWow64		: strSysWow64		= "SysWOW64"
Dim strSystem32		: strSystem32		= "System32"

Dim  PowerCFG, strPwrProfile, strPwrProfileLog, ostrCMD, iRetVal
 
'//----------------------------------------------------------------------------
'// End declarations
'//----------------------------------------------------------------------------

'//----------------------------------------------------------------------------
'// Main routine
'//----------------------------------------------------------------------------
'Begin
oLogging.CreateEntry "Beginning Set-PowerCFG 1.0.0", LogTypeInfo
oLogging.CreateEntry "Active Log Path: " & oUtility.LogPath, LogTypeInfo

'Take Script Args
oLogging.CreateEntry "Getting set Arguments...", LogTypeInfo
If Not WScript.Arguments.Count >= 1 Then
	oLogging.ReportFailure strWmessage, iError
End If 
If WScript.Arguments.Named.Exists("High") Then 
	strPwrProfile = strPwrHighPerf
	strPwrProfileLog = "High"
	oLogging.CreateEntry "Power Profile requested to be set: " & strPwrProfileLog, LogTypeInfo
ElseIf WScript.Arguments.Named.Exists("Bal") Then 
	strPwrProfile = strPwrBalanced
	strPwrProfileLog = "Balanced"
	oLogging.CreateEntry "Power Profile requested to be set: " & strPwrProfileLog, LogTypeInfo
Else
	oLogging.ReportFailure strWmessage, iError
End If

'OS Info for Log
oLogging.CreateEntry "Getting information on Operating System", LogTypeInfo
oLogging.CreateEntry "OS Name: " & oEnvironment.Item("OSVERSION"), LogTypeInfo
oLogging.CreateEntry "OS Version: " & oEnvironment.Item("OSCURRENTVERSION"), LogTypeInfo
oLogging.CreateEntry "OS Architecture: " & oEnvironment.Item("Architecture"), LogTypeInfo

'Get OS Arch and set folder to run powerCFG from.
If oEnvironment.Item("Architecture") = "X86" Or oEnvironment.Item("_SMSTSInWinPE") = "true" Or oEnvironment.Item("OSVERSION") = "WinPE" Then
	strPwrCFGFolder = strSystem32
	oLogging.CreateEntry "Using PowerCFG.exe from: " & strPwrCFGFolder & " Folder.", LogTypeInfo
Elseif oEnvironment.Item("Architecture") = "X64" Then
	strPwrCFGFolder = strSysWow64
	oLogging.CreateEntry "Using PowerCFG.exe from: " & strPwrCFGFolder & " Folder.", LogTypeInfo
Else
	oLogging.ReportFailure "Machine Architecture not supported.", iError
End If

'Setting PowerCFG Location
strCMD = strWindir &  "\" & strPwrCFGFolder & "\" & strPwrCFGexe

'Logging Command
oLogging.CreateEntry "PowerCFG Location set to: " & strCMD, LogTypeInfo
oLogging.CreateEntry "Testing Location Available..." & strCMD, LogTypeInfo
iRetVal = oFso.FileExists(strPath)

If iRetVal = Success Then
	oLogging.CreateEntry "Found PowerCFG.exe at Location: " & strCMD, LogTypeInfo
	strCMD =  Chr(34) & strCMD &  Chr(34)
	oLogging.CreateEntry "Building Command to be run", LogTypeInfo
	strCMD = strCMD & strPwrCFGswitch & strPwrProfile
	oLogging.CreateEntry "Final Command to be run: " & strCMD, LogTypeInfo
	'Run PowerCFG
	iRetVal = oUtility.RunWithHeartbeat(strCMD)
	If iRetVal = Success Then
		oLogging.CreateEntry "Successfully set " & strPwrProfileLog & " Performance profile.", LogTypeInfo
		oLogging.CreateEntry "Set-PowerCFG 1.0.0 Complete...", LogTypeInfo
	Else
		oLogging.ReportFailure "Failed to set " & strPwrProfileLog & " Performance profile.", iError
	End If
Else
	oLogging.ReportFailure "Failed to find path: " & strCMD, iError
End If

	</script>
</job>

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

' //***************************************************************************

' // ***** Script Header *****

' //

' // Solution: Solution Accelerator for Microsoft Deployment

' // File: Set-PowerCFG.wsf

' // Requirements: ZTIUtility.vbs Must be located in the same folder id running from ConfigMGR.

' // Author: SCCMOG Richie Schuster - SCCMOG.com

' // Moddedby: YOURNAMEHERE

' // Date: 21/03/2018

' // Purpose: Script sets power profile during OS deployment - Can be run in WinPE or full OS.

' //

' // Usage: cscript Set-PowerConfig.wsf [/High] - Sets high performance | [/Bal] - Sets balanced performance. [/debug:true]

' //

' // Customer Build Version: 1.0.0

' // Customer Script Version: 1.0.0

' // Customer History:

' //

' // ***** End Header *****

' //***************************************************************************

'//----------------------------------------------------------------------------

'//

'// Global constant and variable declarations

'//

'//----------------------------------------------------------------------------

'Option Explicit

Dim strPwrBalanced : strPwrBalanced = "381b4222-f694-41f0-9685-ff5bb260df2e"

Dim strPwrHighPerf : strPwrHighPerf = "8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c"

Dim strPwrCFGexe : strPwrCFGexe = "powercfg.exe"

Dim strPwrCFGswitch : strPwrCFGswitch = " /S "

Dim strPwrCFGFolder : strPwrCFGFolder = "PowerCFG"

Dim strWmessage : strWmessage = "Please enter one or more arguments 'E.G : /High for High Performance Profile' or '/Bal for Balanced Profile'"

Dim strWindir : strWindir = oShell.ExpandEnvironmentStrings("%Windir%")

Dim strSysWow64 : strSysWow64 = "SysWOW64"

Dim strSystem32 : strSystem32 = "System32"

Dim PowerCFG, strPwrProfile, strPwrProfileLog, ostrCMD, iRetVal

'//----------------------------------------------------------------------------

'// End declarations

'//----------------------------------------------------------------------------

'// Main routine

'//----------------------------------------------------------------------------

'Begin

oLogging.CreateEntry "Beginning Set-PowerCFG 1.0.0", LogTypeInfo

oLogging.CreateEntry "Active Log Path: " & oUtility.LogPath, LogTypeInfo

'Take Script Args

oLogging.CreateEntry "Getting set Arguments...", LogTypeInfo

If Not WScript.Arguments.Count >= 1 Then

oLogging.ReportFailure strWmessage, iError

End If

If WScript.Arguments.Named.Exists("High") Then

strPwrProfile = strPwrHighPerf

strPwrProfileLog = "High"

oLogging.CreateEntry "Power Profile requested to be set: " & strPwrProfileLog, LogTypeInfo

ElseIf WScript.Arguments.Named.Exists("Bal") Then

strPwrProfile = strPwrBalanced

strPwrProfileLog = "Balanced"

oLogging.CreateEntry "Power Profile requested to be set: " & strPwrProfileLog, LogTypeInfo

Else

oLogging.ReportFailure strWmessage, iError

End If

'OS Info for Log

oLogging.CreateEntry "Getting information on Operating System", LogTypeInfo

oLogging.CreateEntry "OS Name: " & oEnvironment.Item("OSVERSION"), LogTypeInfo

oLogging.CreateEntry "OS Version: " & oEnvironment.Item("OSCURRENTVERSION"), LogTypeInfo

oLogging.CreateEntry "OS Architecture: " & oEnvironment.Item("Architecture"), LogTypeInfo

'Get OS Arch and set folder to run powerCFG from.

If oEnvironment.Item("Architecture") = "X86" Or oEnvironment.Item("_SMSTSInWinPE") = "true" Or oEnvironment.Item("OSVERSION") = "WinPE" Then

strPwrCFGFolder = strSystem32

oLogging.CreateEntry "Using PowerCFG.exe from: " & strPwrCFGFolder & " Folder.", LogTypeInfo

Elseif oEnvironment.Item("Architecture") = "X64" Then

strPwrCFGFolder = strSysWow64

oLogging.CreateEntry "Using PowerCFG.exe from: " & strPwrCFGFolder & " Folder.", LogTypeInfo

Else

oLogging.ReportFailure "Machine Architecture not supported.", iError

End If

'Setting PowerCFG Location

strCMD = strWindir & "\" & strPwrCFGFolder & "\" & strPwrCFGexe

'Logging Command

oLogging.CreateEntry "PowerCFG Location set to: " & strCMD, LogTypeInfo

oLogging.CreateEntry "Testing Location Available..." & strCMD, LogTypeInfo

iRetVal = oFso.FileExists(strPath)

If iRetVal = Success Then

oLogging.CreateEntry "Found PowerCFG.exe at Location: " & strCMD, LogTypeInfo

strCMD = Chr(34) & strCMD & Chr(34)

oLogging.CreateEntry "Building Command to be run", LogTypeInfo

strCMD = strCMD & strPwrCFGswitch & strPwrProfile

oLogging.CreateEntry "Final Command to be run: " & strCMD, LogTypeInfo

'Run PowerCFG

iRetVal = oUtility.RunWithHeartbeat(strCMD)

If iRetVal = Success Then

oLogging.CreateEntry "Successfully set " & strPwrProfileLog & " Performance profile.", LogTypeInfo

oLogging.CreateEntry "Set-PowerCFG 1.0.0 Complete...", LogTypeInfo

Else

oLogging.ReportFailure "Failed to set " & strPwrProfileLog & " Performance profile.", iError

End If

Else

oLogging.ReportFailure "Failed to find path: " & strCMD, iError

End If

</script>

</job>

Cheers,

SCCMOG