Repository files navigation

PowerShell module focused around interaction with the Microsoft Endpoint Manager Configuration Manager (MEMCM) client. The general theme is to provide functions that 'work as expected' in that they accept pipeline where possible, such as with the below example, as well as an array of Computer Names, CimSessions, or PSSessions.

Get-CCMUpdate|Invoke-CCMUpdateGet-CCMPackage-PackageName'Install Company Software'-ComputerName Workstation1|Invoke-CCMPackageGet-CCMServiceWindow|ConvertFrom-CCMScheduleGet-CCMBaseline-BaselineName'Cache Management'-CimSession$CimSession1|Invoke-CCMBaselineGet-CCMApplication-ApplicationName'7-Zip'-ComputerName Workstation1|Invoke-CCMApplication-Method Uninstall

Largely this is leveraging CIM to gather info, and act upon it. This is why there are custom functions to make registry edits, and gather registry info via CIM. By consistently using CIM, we can ensure that a CimSession can be used for efficiency. A PSSession parameter is also available on all functions for an alternative remote connection. In some cases, invoking certain CIMMethods over a CIMSession is not available because some CIM methods for the MEMCM client do not work well remotely over CIM. This can be seen with the methods on SMS_CLIENT in the root\CCM Namespace and by trying to invoke updates remotely with CIM. There are functions that allow executing arbitrary code via the Win32_Process:CreateProcess method. In order to do this, code is converted to, and from Base64. This might be a red flag for enterprise AV.

I encourage anyone that wants to contribute to start picking away! I'm currently using VSCode to develop this module, and as part of that I'm using the 'TODO Tree' extension to make brief notes regarding future work that needs done.

Current list of functions:

• ConvertFrom-CCMLogFile
  • Alias: Get-CCMLogFile
• ConvertFrom-CCMSchedule
• ConvertTo-CCMLogFile
• Get-CCMApplication
• Get-CCMBaseline
  • Alias: Get-CCMCB
• Get-CCMCacheContent
• Get-CCMCacheInfo
• Get-CCMCimInstance
• Get-CCMClientDirectory
• Get-CCMClientInfo
• Get-CCMClientVersion
• Get-CCMCurrentManagementPoint
  • Alias: Get-CCMCurrentMP
  • Alias: Get-CCMMP
• Get-CCMCurrentSoftwareUpdatePoint
  • Alias: Get-CCMCurrentSUP
  • Alias: Get-CCMSUP
• Get-CCMCurrentWindowAvailableTime
• Get-CCMDNSSuffix
• Get-CCMExecStartupTime
• Get-CCMGUID
• Get-CCMLastHardwareInventory
  • Alias: Get-CCMLastHINV
• Get-CCMLastHeartbeat
  • Alias: Get-CCMLastDDR
• Get-CCMLastScheduleTrigger
• Get-CCMLastSoftwareInventory
  • Alias: Get-CCMLastSINV
• Get-CCMLoggingConfiguration
• Get-CCMMaintenanceWindow
  • Alias: Get-CCMMW
• Get-CCMPackage
• Get-CCMPrimaryUser
• Get-CCMProvisioningMode
• Get-CCMRegistryProperty
  • Alias: Get-CIMRegistryProperty
• Get-CCMServiceWindow
• Get-CCMSite
• Get-CCMSoftwareUpdate
  • Alias: Get-CCMUpdate
• Get-CCMSoftwareUpdateGroup
  • Alias: Get-CCMSUG
• Get-CCMSoftwareUpdateSettings
• Get-CCMTaskSequence
• Invoke-CCMApplication
• Invoke-CCMBaseline
• Invoke-CCMClientAction
• Invoke-CCMCommand
• Invoke-CCMPackage
• Invoke-CCMResetPolicy
• Invoke-CCMSoftwareUpdate
  • Alias: Invoke-CCMUpdate
• Invoke-CCMTaskSequence
• Invoke-CCMTriggerSchedule
• Invoke-CIMPowerShell
• New-LoopAction
• Remove-CCMCacheContent
• Repair-CCMCacheLocation
• Set-CCMCacheLocation
• Set-CCMCacheSize
• Set-CCMClientAlwaysOnInternet
• Set-CCMDNSSuffix
• Set-CCMLoggingConfiguration
• Set-CCMManagementPoint
  • Alias: Set-CCMMP
• Set-CCMProvisioningMode
• Set-CCMRegistryProperty
  • Alias: Set-CIMRegistryProperty
• Set-CCMSite
• Test-CCMIsClientAlwaysOnInternet
• Test-CCMIsClientOnInternet
• Test-CCMIsWindowAvailableNow
• Test-CCMStaleLog
• Write-CCMLogEntry