Previously I showed how I used SCCM Compliance Settings and Boundary Groups to apply BITS settings. This time I have a discovery and remediation script that can be used with enforce a specific state on a service. If you want to make sure a client\u2019s App-V service stays up or Windows Defender is disabled because you are using another security suite, this could be of help. The script uses variables so someone could easily set the state of the service and start type to what they want.<\/p>\n
I am just going to go over the scripts and not how to do the Compliance Settings stuff Microsoft has documentation explaining that better than I can.<\/p>\n
There are four variables that need to be set:<\/p>\n
$name = Name of the service. I typically get it by running the get-service cmdlet on a box I know has the service and use the Name field to get the proper name
\n$dsrdstrt = The desired start type which can be Automatic, Manual, or Disabled
\n$dsrdstt = The desired state for the service which can be Running, Stopped, Paused
\n$logfile = The path and name of the log file<\/p>\n
That is all there is to them. Set the variables for each script and have fun.<\/p>\n
Discovery Script<\/strong><\/p>\n Remediation Script<\/strong><\/p>\n Previously I showed how I used SCCM Compliance Settings and Boundary Groups to apply BITS settings. This time I have a discovery and remediation script that can be used with enforce a specific state on a service. If you want to make sure a client\u2019s App-V service stays up or Windows Defender is disabled because … Continue reading “SCCM Compliance Settings Scripts to Alter Service State”<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"nf_dc_page":"","jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[5,4,14,13],"tags":[9,7,8,11,12],"class_list":["post-57","post","type-post","status-publish","format-standard","hentry","category-dcm","category-configmgr","category-powershell","category-scripting","tag-compliance-settings","tag-configmgr","tag-dcm","tag-powershell","tag-services"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p98a2r-V","post_mailing_queue_ids":[],"_links":{"self":[{"href":"https:\/\/michaelschultz.net\/tech\/wp-json\/wp\/v2\/posts\/57","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/michaelschultz.net\/tech\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/michaelschultz.net\/tech\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/michaelschultz.net\/tech\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/michaelschultz.net\/tech\/wp-json\/wp\/v2\/comments?post=57"}],"version-history":[{"count":2,"href":"https:\/\/michaelschultz.net\/tech\/wp-json\/wp\/v2\/posts\/57\/revisions"}],"predecessor-version":[{"id":99,"href":"https:\/\/michaelschultz.net\/tech\/wp-json\/wp\/v2\/posts\/57\/revisions\/99"}],"wp:attachment":[{"href":"https:\/\/michaelschultz.net\/tech\/wp-json\/wp\/v2\/media?parent=57"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/michaelschultz.net\/tech\/wp-json\/wp\/v2\/categories?post=57"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/michaelschultz.net\/tech\/wp-json\/wp\/v2\/tags?post=57"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n$name<\/span> =<\/span> "AppVClient"<\/span> #name of service<\/span>
\n$dsrdstrt<\/span> =<\/span> "Automatic"<\/span> #desired start type: Automatic, Manual, Disabled<\/span>
\n$dsrdstt<\/span> =<\/span> "Running"<\/span> #desired state: Running, Stopped, Paused<\/span>
\n
\n#Get service info<\/span>
\n$srv<\/span> =<\/span> get-service<\/span> $name<\/span> -ErrorAction<\/span> SilentlyContinue
\n
\nif<\/span> (<\/span>$srv<\/span> -ne<\/span> $null<\/span>)<\/span>
\n{<\/span>
\n$srvstat<\/span> =<\/span> $srv<\/span>.status
\n$srvstart<\/span> =<\/span> $srv<\/span>.StartType
\n
\nif<\/span> (<\/span>$srvstat<\/span> -eq<\/span> "$dsrdstt"<\/span>)<\/span>
\n{<\/span>
\nif<\/span> (<\/span>$srv<\/span>.StartType -eq<\/span> "$dsrdstrt"<\/span>)<\/span>
\n{<\/span>
\n$compliance<\/span> =<\/span> "true"<\/span>
\n}<\/span>
\n
\nelse<\/span>
\n{<\/span>
\n$compliance<\/span> =<\/span> "false"<\/span>
\n}<\/span>
\n}<\/span>
\nelse<\/span>
\n{<\/span>
\n$compliance<\/span> =<\/span> "false"<\/span>
\n}<\/span>
\n}<\/span>
\n
\nelse<\/span>
\n{<\/span>
\n$compliance<\/span> =<\/span> "true"<\/span> #This is built on the basis of not existing is compliant. Can be changed to false to set not existing as not compliant.<\/span>
\n}<\/span>
\n
\n$compliance<\/div><\/div>\n
\n$name<\/span> =<\/span> "AppVClient"<\/span> #name of service<\/span>
\n$dsrdstrt<\/span> =<\/span> "Automatic"<\/span> #desired start type: Automatic, Manual, Disabled<\/span>
\n$dsrdstt<\/span> =<\/span> "Running"<\/span> #desired state: Running, Stopped, Paused<\/span>
\n
\n#Get service info<\/span>
\n$srv<\/span> =<\/span> get-service<\/span> $name<\/span> -ErrorAction<\/span> SilentlyContinue
\n
\nif<\/span> (<\/span>$srv<\/span>)<\/span>
\n{<\/span>
\n$srvstat<\/span> =<\/span> $srv<\/span>.status
\n$srvstart<\/span> =<\/span> $srv<\/span>.StartType
\n
\n#set service startup type if it doesn't match the set variable<\/span>
\nif<\/span> (<\/span>$srvstart<\/span> -ne<\/span> "$dsrdstrt"<\/span>)<\/span>
\n{<\/span>
\nSet-Service<\/span> -Name<\/span> $name<\/span> -StartupType<\/span> $dsrdstrt<\/span>
\n}<\/span>
\n
\n#set service state type if it doesn't match the set variable<\/span>
\nif<\/span> (<\/span>$srvstat<\/span> -ne<\/span> "$dsrdstt"<\/span>)<\/span>
\n{<\/span>
\nSet-Service<\/span> -Name<\/span> $name<\/span> -Status<\/span> $dsrdstt<\/span>
\n
\n}<\/span>
\n
\n}<\/span><\/div><\/div>\n","protected":false},"excerpt":{"rendered":"