-
Notifications
You must be signed in to change notification settings - Fork 206
/
Copy pathClear-SysMProfile.ps1
109 lines (92 loc) · 4.02 KB
/
Clear-SysMProfile.ps1
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
#Requires -Version 5.0
#Requires -Modules ActiveDirectory
<#
.SYNOPSIS
Remove profile on computer
.DESCRIPTION
.NOTES
This PowerShell script was developed and optimized for ScriptRunner. The use of the scripts requires ScriptRunner.
The customer or user is authorized to copy the script from the repository and use them in ScriptRunner.
The terms of use for ScriptRunner do not apply to this script. In particular, ScriptRunner Software GmbH assumes no liability for the function,
the use and the consequences of the use of this freely available script.
PowerShell is a product of Microsoft Corporation. ScriptRunner is a product of ScriptRunner Software GmbH.
© ScriptRunner Software GmbH
.COMPONENT
Requires Module ActiveDirectory
Requires Library script SysMLibrary.ps1
.LINK
https://github.com/scriptrunner/ActionPacks/tree/master/WinSystemManagement/System
.Parameter ComputerName
Specifies the computer from which the profile are removed
.Parameter AccessAccount
Specifies a user account that has permission to perform this action. If Credential is not specified, the current user account is used
.Parameter PreviousAction
Action to be performed before remove the profile
.Parameter PreviousServerProfileAction
Action to be performed before remove the profile on server
.Parameter UserName
Specifies the name of the user whose profile should be removed
.Parameter UserSID
Specifies the SID of the user whose profile should be removed
#>
param(
[Parameter(Mandatory = $true,ParameterSetName = "BySID")]
[Parameter(Mandatory = $true,ParameterSetName = "ByName")]
[string]$ComputerName,
[Parameter(Mandatory = $true,ParameterSetName = "BySID")]
[string]$UserSID,
[Parameter(Mandatory = $true,ParameterSetName = "ByName")]
[string]$UserName,
[Parameter(ParameterSetName = "BySID")]
[Parameter(ParameterSetName = "ByName")]
[pscredential]$AccessAccount,
[Parameter(ParameterSetName = "BySID")]
[Parameter(ParameterSetName = "ByName")]
[ValidateSet('None','ZipProfile','Rename')]
[string]$PreviousAction = 'ZipProfile',
[Parameter(ParameterSetName = "BySID")]
[Parameter(ParameterSetName = "ByName")]
[ValidateSet('None','ZipProfile','Rename')]
[string]$PreviousServerProfileAction = 'ZipProfile'
)
Import-Module ActiveDirectory
$Script:Cim= $null
try{
if([System.String]::IsNullOrWhiteSpace($ComputerName)){
$ComputerName = [System.Net.DNS]::GetHostByName('').HostName
}
if($null -eq $AccessAccount){
$Script:Cim = New-CimSession -ComputerName $ComputerName -ErrorAction Stop
}
else {
$Script:Cim = New-CimSession -ComputerName $ComputerName -Credential $AccessAccount -ErrorAction Stop
}
$Script:usr
if($PSCmdlet.ParameterSetName -eq 'ByName' ){
$Script:usr = Get-ADUser -Identity $UserName -Properties Name,SID,ProfilePath -ErrorAction Stop
$UserSID = $Script:usr.SID
}
else{
$Script:usr = Get-ADUser -Filter {SID -eq $UserSID} -Properties Name,SID,ProfilePath -ErrorAction Stop
}
$quy = [System.String]::Format("SELECT * FROM Win32_UserProfile WHERE SID = '{0}'",$UserSID)
$usrProfile = Get-CimInstance -CimSession $Script:Cim -Query $quy -ErrorAction Stop
# Server action
RemoveServerProfile -ADUser $Script:usr -Action $PreviousServerProfileAction
# Computer action
RemoveComputerProfile -AccessAccount $AccessAccount -ComputerName $ComputerName -CimInstance $usrProfile -Action $PreviousAction
if($SRXEnv) {
$SRXEnv.ResultMessage = "Profile $($usrProfile.LocalPath) removed"
}
else{
Write-Output "Profile $($usrProfile.LocalPath) removed"
}
}
catch{
throw
}
finally{
if($null -ne $Script:Cim){
Remove-CimSession $Script:Cim
}
}