This commit is contained in:
2023-11-29 17:05:11 +01:00
parent 66083cbec6
commit 21f011c407
16 changed files with 235 additions and 0 deletions

View File

@@ -0,0 +1,13 @@
[CmdletBinding()]
param(
[Parameter(Mandatory=$True)] [string] $DomainGroup,
[Parameter(Mandatory=$True)] [string] $PolicyName
)
$taskName = "Update_$($PolicyName)_Users"
$argument = "-NoProfile -command " + '"' + "& Get-ADGroupMember -Recursive -Identity " + "'" + $DomainGroup + "'" + "| ForEach-Object {Set-ADAccountAuthenticationPolicySilo -AuthenticationPolicy " + $PolicyName + " -Identity " + '$_' + ".SamAccountName}" + '"'
$action = New-ScheduledTaskAction -Execute 'Powershell.exe' -Argument $argument
$trigger = New-ScheduledTaskTrigger -Daily -At 12am
$STPrin = New-ScheduledTaskPrincipal -GroupId "System" -RunLevel Highest
Register-ScheduledTask -Action $action -Trigger $trigger -TaskName $taskName -Principal $STPrin -Description "Update Authentication policy '$PolicyName' users with '$DomainGroup' members"