{"id":313,"date":"2019-03-08T19:20:23","date_gmt":"2019-03-08T19:20:23","guid":{"rendered":"http:\/\/michaelschultz.net\/tech\/?p=313"},"modified":"2019-03-10T19:09:48","modified_gmt":"2019-03-10T19:09:48","slug":"configmgr-powershell-script-create-collections-off-compliance-settings-configuration-items","status":"publish","type":"post","link":"https:\/\/michaelschultz.net\/tech\/configmgr-powershell-script-create-collections-off-compliance-settings-configuration-items\/","title":{"rendered":"ConfigMgr PowerShell Script – Create Collections off Compliance Settings Configuration Items"},"content":{"rendered":"\n

The script uses Get-CMConfigurationItem cmdlet to get a list of LocalizedDisplayNames of Compliance Setting CIs and then runs a Foreach to create three collections based using the LocalizedDisplayName. Parameters specify the CM Site Code, Limiting Collection collection ID, and the CI Name. It does a check to see if a collection exists beofre creating which is also a self repair feature as a deleted collection will be recreated.<\/p>\n\n\n\n\n\n\n\n\n

<#
\n.SYNOPSIS
\nThis script creates Compliant, Non-Compliant, and Failure collections for Copliance Settings Configuration Items
\n
\n.SYNTAX
\ncreate_CI_compliance_collections.ps1 -sc <site_code> -limiter <limiting_collection> -ciname <Name_of_CI>
\n
\n.DESCRIPTION
\nThe script uses Get-CMConfigurationItem cmdlet to get a list of LocalizedDisplayNames of Compliance Setting CIs and then runs a Foreach to create three collections based using the LocalizedDisplayName.  Parameters specify the CM Site Code, LImiting Collection collection ID, and the CI Name. It does a check to see if a collection exists beofre creating which is also a self repair feature as a deleted collection will be recreated.
\n
\n.PARAMETER sc
\nConfigMgr site code.  Format is site code followed by :
\n
\n.PARAMETER limiter
\nCollection ID of limiting collection
\n
\n.PARAMETER ciname
\nName of the CI to build collections off.  This can use * as wildcard as the command run is Get-CMConfigurationItem -fast -Name $ciname | Select-Object -ExpandProperty LocalizedDisplayName
\n
\n.INPUTS
\n
\n.OUTPUTS
\n
\n.NOTES
\nFileName: create_CI_compliance_collections.ps1
\nAuthor: Michael Schultz
\nContact: mschultz@necro-monkey.com
\nCreated: 20190307
\nModified:
\nVersion: 1
\n
\n.EXAMPLE
\ncreate_CI_compliance_collections.ps1 -sc BOB -limiter SMS00001 -ciname *bob*
\n
\n#><\/span>
\n
\n#-----Parameters-----<\/span>
\n
\nParam<\/span> (<\/span>
\n    [<\/span>Parameter(<\/span>ParameterSetName=<\/span>2<\/span>,<\/span>Mandatory=<\/span>$true<\/span>)<\/span>]<\/span>
\n    [<\/span>string<\/span>]<\/span>$sc<\/span>,<\/span>
\n    [<\/span>Parameter(<\/span>ParameterSetName=<\/span>2<\/span>,<\/span>Mandatory=<\/span>$true<\/span>)<\/span>]<\/span>
\n    [<\/span>string<\/span>]<\/span>$limiter<\/span>,<\/span>
\n    [<\/span>Parameter(<\/span>ParameterSetName=<\/span>2<\/span>,<\/span>Mandatory=<\/span>$true<\/span>)<\/span>]<\/span>
\n    [<\/span>string<\/span>]<\/span>$ciname<\/span>    
\n
\n)<\/span>
\n#-----Initializations and Module Imports-----<\/span>
\n
\n#Get ConfigMgr Console Install Path to locate PS Module.<\/span>
\n
\nIf<\/span> (<\/span>Test-Path<\/span> "C:\\Program Files\\Microsoft Configuration Manager\\AdminConsole\\bin\\ConfigurationManager.psd1"<\/span>)<\/span>
\n{<\/span>
\n    Import-<\/span>Module "C:\\Program Files\\Microsoft Configuration Manager\\AdminConsole\\bin\\ConfigurationManager.psd1"<\/span>
\n}<\/span>
\nelseIf<\/span> (<\/span>Test-Path<\/span> "C:\\Program Files (x86)\\Microsoft Configuration Manager\\AdminConsole\\bin\\ConfigurationManager.psd1"<\/span>)<\/span>
\n{<\/span>
\n    Import-<\/span>Module "C:\\Program Files (x86)\\Microsoft Configuration Manager\\AdminConsole\\bin\\ConfigurationManager.psd1"<\/span>
\n}<\/span>
\nelseif<\/span> (<\/span>test-path<\/span> "d:\\Program Files\\Microsoft Configuration Manager\\AdminConsole\\bin\\ConfigurationManager.psd1"<\/span>)<\/span>
\n{<\/span>
\n    Import-<\/span>Module "d:\\Program Files\\Microsoft Configuration Manager\\AdminConsole\\bin\\ConfigurationManager.psd1"<\/span>
\n}<\/span>
\nelseIf<\/span> (<\/span>Test-Path<\/span> "d:\\Program Files (x86)\\Microsoft Configuration Manager\\AdminConsole\\bin\\ConfigurationManager.psd1"<\/span>)<\/span>
\n{<\/span>
\n    Import-<\/span>Module "d:\\Program Files (x86)\\Microsoft Configuration Manager\\AdminConsole\\bin\\ConfigurationManager.psd1"<\/span>
\n}<\/span>
\nElse<\/span> {<\/span>
\n    Write-output<\/span> "Can't Find your ConfigMgr Module"<\/span>
\n    exit
\n}<\/span>
\n
\n#Change to ConfigMgr PSDrive<\/span>
\nSet-Location<\/span> $sc<\/span>
\n
\n#-----Variables-----<\/span>
\n
\n$recurint<\/span> =<\/span> 'Days'<\/span>
\n$recurct<\/span> =<\/span> '1'<\/span>
\n$schedule<\/span> =<\/span> New-<\/span>CMSchedule -<\/span>RecurInterval $recurint<\/span> -<\/span>RecurCount $recurct<\/span>
\n$cis<\/span> =<\/span> Get-<\/span>CMConfigurationItem -<\/span>fast -Name<\/span> $ciname<\/span> |<\/span> Select-Object<\/span> -ExpandProperty<\/span> LocalizedDisplayName
\n
\n#-----Functions-----<\/span>
\n
\n#-----Logging-----<\/span>
\n
\n#-----Execution-----<\/span>
\n
\nForeach<\/span> (<\/span>$LocalizedDisplayName<\/span> in<\/span> $cis<\/span>)<\/span>
\n{<\/span>
\n
\n    $cildname<\/span> =<\/span> $LocalizedDisplayName<\/span>
\n    $collcompliant<\/span> =<\/span> $cildname<\/span> +<\/span> ' - Compliant'<\/span>
\n    $collnoncompliant<\/span> =<\/span> $cildname<\/span> +<\/span> ' - Non-Compliant'<\/span>
\n    $collerror<\/span> =<\/span> $cildname<\/span> +<\/span> ' - Failure'<\/span>
\n
\n    $CollectionExist<\/span> =<\/span> Get-<\/span>CMDeviceCollection -Name<\/span> $collcompliant<\/span>
\n    If<\/span>(<\/span>!<\/span>(<\/span>$CollectionExist<\/span>)<\/span>)<\/span> {<\/span>
\n        $rulevariablecomp<\/span> =<\/span> 'select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System where SMS_R_System.ResourceID in (select SMS_CI_COMP.ResourceID from SMS_CI_CurrentComplianceStatus as SMS_CI_COMP inner join SMS_ConfigurationItem as SMS_CI on SMS_CI.ci_id=SMS_CI_COMP.ci_id where ((SMS_CI_COMP.DisplayName = "'<\/span> +<\/span> $cildname<\/span> +<\/span> '" and SMS_CI.islatest = 1  and SMS_CI_COMP.ComplianceState = 1) and SMS_CI_COMP.LastComplianceMessageTime >= Dateadd(dd,-7,GETDATE())))'<\/span>
\n        New-<\/span>CMDeviceCollection -<\/span>LimitingCollectionId $limiter<\/span> -Name<\/span> $collcompliant<\/span> -<\/span>RefreshSchedule $schedule<\/span>
\n        Add-<\/span>CMDeviceCollectionQueryMembershipRule -<\/span>CollectionName $collcompliant<\/span>  -<\/span>RuleName Rule -<\/span>QueryExpression $rulevariablecomp<\/span>
\n    }<\/span>
\n
\n    $CollectionExist<\/span> =<\/span> Get-<\/span>CMDeviceCollection -Name<\/span> $collnoncompliant<\/span>
\n    If<\/span>(<\/span>!<\/span>(<\/span>$CollectionExist<\/span>)<\/span>)<\/span> {<\/span>
\n        $rulevariablenon<\/span> =<\/span> 'select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System where SMS_R_System.ResourceID in (select SMS_CI_COMP.ResourceID from SMS_CI_CurrentComplianceStatus as SMS_CI_COMP inner join SMS_ConfigurationItem as SMS_CI on SMS_CI.ci_id=SMS_CI_COMP.ci_id where ((SMS_CI_COMP.DisplayName = "'<\/span> +<\/span> $cildname<\/span> +<\/span> '" and SMS_CI.islatest = 1  and SMS_CI_COMP.ComplianceState = 2) and SMS_CI_COMP.LastComplianceMessageTime >= Dateadd(dd,-7,GETDATE())))'<\/span>
\n        New-<\/span>CMDeviceCollection -<\/span>LimitingCollectionId $limiter<\/span> -Name<\/span> $collnoncompliant<\/span> -<\/span>RefreshSchedule $schedule<\/span>
\n        Add-<\/span>CMDeviceCollectionQueryMembershipRule -<\/span>CollectionName $collnoncompliant<\/span>  -<\/span>RuleName Rule -<\/span>QueryExpression $rulevariablenon<\/span>
\n    }<\/span>
\n
\n    $CollectionExist<\/span> =<\/span> Get-<\/span>CMDeviceCollection -Name<\/span> $collerror<\/span>
\n    If<\/span>(<\/span>!<\/span>(<\/span>$CollectionExist<\/span>)<\/span>)<\/span> {<\/span>
\n        $rulevariableer<\/span> =<\/span> 'select SMS_R_SYSTEM.ResourceID,SMS_R_SYSTEM.ResourceType,SMS_R_SYSTEM.Name,SMS_R_SYSTEM.SMSUniqueIdentifier,SMS_R_SYSTEM.ResourceDomainORWorkgroup,SMS_R_SYSTEM.Client from SMS_R_System where SMS_R_System.ResourceID in (select SMS_CI_COMP.ResourceID from SMS_CI_CurrentComplianceStatus as SMS_CI_COMP inner join SMS_ConfigurationItem as SMS_CI on SMS_CI.ci_id=SMS_CI_COMP.ci_id where ((SMS_CI_COMP.DisplayName = "'<\/span> +<\/span> $cildname<\/span> +<\/span> '" and SMS_CI.islatest = 1  and SMS_CI_COMP.ComplianceState = 4) and SMS_CI_COMP.LastComplianceMessageTime >= Dateadd(dd,-7,GETDATE())))'<\/span>
\n        New-<\/span>CMDeviceCollection -<\/span>LimitingCollectionId $limiter<\/span> -Name<\/span> $collerror<\/span> -<\/span>RefreshSchedule $schedule<\/span>
\n        Add-<\/span>CMDeviceCollectionQueryMembershipRule -<\/span>CollectionName $collerror<\/span>  -<\/span>RuleName Rule -<\/span>QueryExpression $rulevariableer<\/span>
\n    }<\/span>
\n
\n}<\/span><\/div><\/div>\n\n\n\n\n

The script can also be found on my GitHub repo at https:\/\/github.com\/NecroMonkey\/vault\/blob\/master\/ConfigMgr-Scripts\/create_CI_compliance_collections.ps1<\/a><\/p>\n\n\n\n

<\/p>\n","protected":false},"excerpt":{"rendered":"

The script uses Get-CMConfigurationItem cmdlet to get a list of LocalizedDisplayNames of Compliance Setting CIs and then runs a Foreach to create three collections based using the LocalizedDisplayName. Parameters specify the CM Site Code, Limiting Collection collection ID, and the CI Name. It does a check to see if a collection exists beofre creating which … Continue reading “ConfigMgr PowerShell Script – Create Collections off Compliance Settings Configuration Items”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"nf_dc_page":"","jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[4,14,13],"tags":[],"class_list":["post-313","post","type-post","status-publish","format-standard","hentry","category-configmgr","category-powershell","category-scripting"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p98a2r-53","post_mailing_queue_ids":[],"_links":{"self":[{"href":"https:\/\/michaelschultz.net\/tech\/wp-json\/wp\/v2\/posts\/313","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/michaelschultz.net\/tech\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/michaelschultz.net\/tech\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/michaelschultz.net\/tech\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/michaelschultz.net\/tech\/wp-json\/wp\/v2\/comments?post=313"}],"version-history":[{"count":2,"href":"https:\/\/michaelschultz.net\/tech\/wp-json\/wp\/v2\/posts\/313\/revisions"}],"predecessor-version":[{"id":316,"href":"https:\/\/michaelschultz.net\/tech\/wp-json\/wp\/v2\/posts\/313\/revisions\/316"}],"wp:attachment":[{"href":"https:\/\/michaelschultz.net\/tech\/wp-json\/wp\/v2\/media?parent=313"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/michaelschultz.net\/tech\/wp-json\/wp\/v2\/categories?post=313"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/michaelschultz.net\/tech\/wp-json\/wp\/v2\/tags?post=313"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}