Weird Windows Fixes

Detect autopilot session

2021-10-02T09:25:00.001-07:00

Ensuring that some apps only install during autopilot is not easily accomplished, you can use the below powershell script as a requirement rule in Intune for the application.This ensure it'll only proceed when the PC is going through autopilot.

$username = "defaultuser0"
$currentuser = (Get-Process -IncludeUserName -Name explorer | Select-Object -ExpandProperty UserName).Split('\')[1]

if ($currentuser -eq $username)
{
    Write-Output 1
    Exit 0
}
else {
    exit 1
}

Code42 proactive remediation - Check for last successful backup

2021-10-01T19:13:00.004-07:00

There is no easy way to script a check on code42 being active and working on windows PCs. One way is to use the logs to read if Code42 is backing up recently.

#By tausif for FICO

###############
if ((Get-Service Code42Service).Status -eq "Running")
{
    #get code42 logged in user
    if (Test-Path "$env:ALLUSERSPROFILE\CrashPlan\.identity")
    {
        $c42currentuser  = (Get-Content $env:ALLUSERSPROFILE\CrashPlan\.identity) | Select-String -Pattern "username"
        #Get last backup date
        ##################################################################################
        $todaysdate = Get-Date -UFormat "%m/%d/%y"
        $dt = [DateTIme]$todaysdate
        $todayminus60 = $dt.AddDays(-60)
        $logdatepattern = "\d{2}/\d{2}/\d{2}"
        if (Test-Path "$env:ALLUSERSPROFILE\CrashPLan\Log\history.log.0") 
        {
            $lastlinedateonhistorylog = (Get-Content $env:ALLUSERSPROFILE\CrashPLan\Log\history.log.0)[-1] | Select-String -Pattern $logdatepattern | foreach {$_.Matches.Groups[0].Value}

            $patcompletedbackuptoprecloud = "Completed backup to PROe Cloud"
            $backupcompleteline = (Get-Content $env:ALLUSERSPROFILE\CrashPlan\Log\history.log.0 | Select-String -Pattern $patcompletedbackuptoprecloud )[-1]
            $backuppaths = (Get-Content $env:ALLUSERSPROFILE\CrashPLan\Log\app.log)|  Select-String -pattern  "backupPaths  "
            $lastbackupdate = [string]$backupcompleteline | Select-String -Pattern $logdatepattern | foreach {$_.Matches.Groups[0].Value}
            $ndt = [DateTIme]$lastbackupdate
            $dayssincelastbackup = (New-TimeSpan -Start $ndt -End $dt).TotalDays

            ######

            If ($dayssincelastbackup -ge "30")
            {
               
                Write-Output "More than $dayssincelastbackup since last backup, Last back up date: $lastbackupdate, C42 logged on $c42currentuser, $backuppaths"
    
                exit 1
            }
            else
            {
                Write-Output "Days since last backup $dayssincelastbackup, Last back up date: $lastbackupdate, C42 logged on $c42currentuser, $backuppaths"
                exit 0
            }
        }
        else
        {
            Write-Output "No history of successful backup"
            exit 1
        }


    }
    else
    {
        Write-Output "No User logged in"
        exit 1
    }
}
else
{
    Write-Output "Code42 Service not running"
    exit 1
}

Remove Box tools-per user install

2021-10-01T18:58:00.000-07:00

SCCM - Install dell drivers dynamically during OSD

2017-12-05T12:08:00.004-08:00

The below script may be used in an SCCM task to download Dell drivers from :
"http://en.community.dell.com/techcenter/enterprise-client/w/wiki/2065.dell-command-deploy-driver-packs-for-enterprise-client-os-deployment" to a PC being imaged.

Create a Dell group in the task sequence
Run the Powershell Script to filter dell systems with the WMI query as shown below.

The next step should run the powershell script shown below

Add another step to install dell drivers as using dism

The powershell script is shown below:

#By Tausif for FICO
#download dell drivers directly and install during the SCCM task sequence.

#Logging function borrowed from Mikael Nystrom 
Function Import-SMSTSENV
{
 try
 {
  $tsenv = New-Object -COMObject Microsoft.SMS.TSEnvironment
  Write-Output "$ScriptName - tsenv is $tsenv "
  $MDTIntegration = "YES"
  
  #$tsenv.GetVariables() | % { Write-Output "$ScriptName - $_ = $($tsenv.Value($_))" }
 }
 catch
 {
  Write-Output "$ScriptName - Unable to load Microsoft.SMS.TSEnvironment"
  Write-Output "$ScriptName - Running in standalonemode"
  $MDTIntegration = "NO"
 }
 Finally
 {
  if ($MDTIntegration -eq "YES")
  {
   $Logpath = $tsenv.Value("LogPath")
   $LogFile = $Logpath + "\" + "$ScriptName.log"
   
  }
  Else
  {
   $Logpath = $env:TEMP
   $LogFile = $Logpath + "\" + "$ScriptName.txt"
  }
 }
}
Function Start-Logging
{
 start-transcript -path $LogFile -Force
}
Function Stop-Logging
{
 Stop-Transcript
}

# Set Vars
$SCRIPTDIR = split-path -parent $MyInvocation.MyCommand.Path
$SCRIPTNAME = split-path -leaf $MyInvocation.MyCommand.Path
$SOURCEROOT = "$SCRIPTDIR\Source"
$LANG = (Get-Culture).Name
$OSV = $Null
$ARCHITECTURE = $env:PROCESSOR_ARCHITECTURE

#Try to Import SMSTSEnv
. Import-SMSTSENV

#Start Transcript Logging
. Start-Logging


#Output base info
Write-Output ""
Write-Output "$ScriptName - ScriptDir: $ScriptDir"
Write-Output "$ScriptName - SourceRoot: $SOURCEROOT"
Write-Output "$ScriptName - ScriptName: $ScriptName"
Write-Output "$ScriptName - Log: $LogFile"



Function Set-RegistryKey
{
 [CmdletBinding()]
 Param(
 [Parameter(Mandatory=$True,HelpMessage="Please Enter Registry Item Path",Position=1)]
 $Path,
 [Parameter(Mandatory=$True,HelpMessage="Please Enter Registry Item Name",Position=2)]
 $Name,
 [Parameter(Mandatory=$True,HelpMessage="Please Enter Registry Property Item Value",Position=3)]
 $Value,
 [Parameter(Mandatory=$False,HelpMessage="Please Enter Registry Property Type",Position=4)]
 $PropertyType = "DWORD"
 )
 
 # If path does not exist, create it
 If( (Test-Path $Path) -eq $False ) {
 
 $newItem = New-Item -Path $Path -Force
 
 } 
 
 # Update registry value, create it if does not exist (DWORD is default)
 $itemProperty = Get-ItemProperty -Path $Path -Name $Name -ErrorAction SilentlyContinue
 If($itemProperty -ne $null) {
 $itemProperty = Set-ItemProperty -Path $Path -Name $Name -Value $Value
 } Else {
 
 $itemProperty = New-ItemProperty -Path $Path -Name $Name -Value $Value -PropertyType $PropertyType
 }
 
}





 Function Get-OSVersion() {
# Version numbers as per http://www.gaijin.at/en/lstwinver.php
$osVersion = "Version not listed"
$os = (Get-WmiObject -class Win32_OperatingSystem)
Switch (($os.Version).Substring(0,3)) {
    "5.1" { $osVersion = "XP" }
    "5.2" { $osVersion = "2003" }
    "6.0" { If ($os.ProductType -eq 1) { $osVersion = "Vista" } Else { $osVersion = "2008" } }
    "6.1" { If ($os.ProductType -eq 1) { $osVersion = "Windows 7" } Else { $osVersion = "2008R2" } }
    "6.2" { If ($os.ProductType -eq 1) { $osVersion = "Windows 8" } Else { $osVersion = "2012" } }
    # 8.1/2012R2 version detection can be broken, and show up as "6.2", as per http://www.sapien.com/blog/2014/04/02/microsoft-windows-8-1-breaks-version-api/
    "6.3" { If ($os.ProductType -eq 1) { $osVersion = "Windows 8.1" } Else { $osVersion = "2012R2" } }
    "10." { If ($os.ProductType -eq 1) { $osVersion = "Windows 10" } Else { $osVersion = "2016" } }
}
return $osVersion
}

$osversion = Get-OSVersion
Write-Output "$osversion - Log: $LogFile"
$Model = (Get-WmiObject Win32_ComputerSystem).Model
Write-Output "$Model - Log: $LogFile"

### Disable IE First Run Wizard and RSS Feeds this is needed to Invoke-Webrequest will work without running IE for the first time.
Set-RegistryKey -Path "HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Main" -Name "DisableFirstRunCustomize" -Value 1


# Remove the "E" prefix character from Latitude models due to some dodgy Dell URLs...
If ($Model.ToCharArray()[0] -eq "E" -and $Model -notmatch "Embedded")
{
 $Model = $Model.Replace("E", "")
 Write-Output "Model name set to $Model - Log: $LogFile"
}

# Find the specific wiki page for the model from the main wiki page
$URI = "http://en.community.dell.com/techcenter/enterprise-client/w/wiki/2065.dell-command-deploy-driver-packs-for-enterprise-client-os-deployment"
Write-Output "URI set to $URI - Log: $LogFile"
$html = Invoke-WebRequest $URI -ErrorAction Stop -TimeoutSec 1800
Write-Output "$URL queried successfully - Log: $LogFile"
$Href = $HTML.AllElements | Where {$_.innerText -match ("$Model" + " W") -and $_.innerText -match "Windows 10" -and $_.innerText -match "Driver" -and $_.tagName -eq "A"} | Select -ExpandProperty href
If (!$Href)
{
 Write-Output "No Wiki page found for $Model and $OperatingSystem.- Log: $LogFile"
    Return
}
Write-Output "Wiki page found for $Model and $OperatingSystem. - $Href - Log: $LogFile"
# Find the download URL from the model
$URI = "http://en.community.dell.com/$Href"

Write-Output "URI updated to $URI - Log: $LogFile"
Try
{
    $HTML = Invoke-WebRequest -Uri $URI -ErrorAction Stop
    $CabDownloadLink = $HTML.AllElements | Where {$_.innerHTML -match "Download Now" -and $_.tagName -eq "A"} | Select -ExpandProperty href
 #Return $CabDownloadLink
 Write-Output "Cab download link set to $CabDownloadLink - Log: $LogFile"
}
Catch
{
 $_
 Write-Output "Cab download not found- Log: $LogFile"
    Return
}

$CABfilename = $CabDownloadLink.Substring($CabDownloadLink.LastIndexOf("/") + 1)
Write-Output "Cab file name is $CABfilename - Log: $LogFile"
$drivedownloaddirectory = "C:\Temp"

if(!(Test-Path -Path $drivedownloaddirectory )){
 New-Item -ItemType directory -Path $drivedownloaddirectory
 Write-Output "$drivedownloaddirectory created - Log: $LogFile"
}

$CABDestinationpath = "$drivedownloaddirectory\$CABfilename"
Write-Output "The CAB will be downloaded to $CABDestinationpath - Log: $LogFile"
Try
{
    # Begin the download
    $WebClient = New-Object System.Net.WebClient
    $WebClient.DownloadFile($CabDownloadLink, $CABDestinationpath)
}
Catch
{
 $Stopwatch.Stop()
 Write-Output "Failed to download file - Log: $LogFile"
    $_
    Return

}




$DriverSourceCab = (Get-ChildItem $drivedownloaddirectory).FullName
$DriverExtractDest = "$drivedownloaddirectory\Extracted"


if(!(Test-Path -Path $DriverExtractDest )){
 New-Item -ItemType directory -Path $DriverExtractDest
 Write-Output "Created the $DriverExtractDest directory - Log: $LogFile"
}

Expand "$DriverSourceCab" -F:* "$DriverExtractDest"
<#
#Copy-Item "C:\Windows\System32\pnputil.exe" "X:\Windows\System32"
$driverinfs = get-childitem -path $DriverExtractDest -recurse -filter *.inf
foreach ($inf in $driverinfs)
 
{
    Write-Host "Injecting driver $inf"
    #pnputil -i -a $inf.FullName
}

#this part does not work because for some reason it throws a memory error, will replace this with:

DISM.exe /Image:%OSDTargetSystemDrive%\ /Add-Driver /Driver:c:\Temp\Extracted /Recurse /logpath:%_SMSTSLogPath%\dism.log
#>
. Stop-Logging

This script logs to SMSTS.log directly and the dism step can log to wherever you'd like it to.

Add another step to delete the Extracted drivers and downloaded drivers as needed.

Powershell - Download and install Java using powershell

2017-05-02T16:55:00.003-07:00

I got tired of updating the JRE package for our windows task sequences and used powershell to scrape for web-links from https://www.java.com/en/download/manual.jsp and install it silently.

Delete DEPROVISIONED okta users using API

2017-03-04T11:10:00.003-08:00

Okta tombstones its users and does not delete them automatically when they are deactivated in AD. I use the below script to run on schedule with an okta API token to delete users:
You'll need the okta powershell module install and be a super user on okta :
https://github.com/okta/oktasdk-csharp/tree/master/Okta.Core.Automation/

#Import module okta
Import-Module Okta.Core.Automation
 
#COnnect to okta  using token and domain
Connect-Okta -Token alphanumerictoken -FullDomain "https://domain.okta.com"
 
 
###################Logging function
$Logfile = "$env:ProgramData\InstallLogs\DeleteOktaUsers_$(get-date -format `"yyyyMMdd_hhmmsstt`").log"
Function LogWrite($string, $color)
{
   if ($Color -eq $null) {$color = "white"}
   write-host $string -foregroundcolor $color
   $string | out-file -Filepath $Logfile -append
}
 
if ((Test-Path -path C:\ProgramData\InstallLogs\) -ne $True)
{
New-Item C:\ProgramData\InstallLogs\ -type directory
}
 
########################################
 
 
#get a list of all DEPROVISIONED users
$AllUsers = Get-OktaUser -Filter 'status eq "DEPROVISIONED"'


#list neatly in a csv file located in C:\programdata\InstallLogs
$AllUsers | Select @{L="FirstName";E={$_.profile.firstName}},`
@{L="LastName";E={$_.profile.lastName}},`
@{L="UserName";E={$_.profile.login}},`
@{L="ID";E={$_.id}},@{L="UserStatus";E={$_.Status}} | FT | Out-File "$env:ProgramData\InstallLogs\deprovisionedusers_$(get-date -format `"yyyyMMdd_hhmmsstt`").csv"
 
 
#loop through the list of deprovisioned users and delete log deletions to the logfile
foreach($user in $AllUsers){
   
    Delete-OktaUser $user.Profile.Login
    If($? -eq "True") {
     LogWrite "Successfully deleted user $user" green
     }
}

Office for mac autodicover error with okta -

2017-02-03T08:41:00.000-08:00

You see the following error when signing into Office for mac 2016 with okta SSO enabled for office 365:

Update Outlook for mac 2016 to version 15.30 and above
Run the following command on your terminal and hit enter:

defaults write com.microsoft.Outlook DisableModernAuth -bool YES

Then check if the following location is updated ~/Library/Group Containers/UBF8T346G9.Office/Outlook/Outlook 15 Profiles/Main Profile/Caches/

You might need to remove and re-add your exchange account on outlook.

Powershell functions to uninstall anyconnect modules

2016-12-07T22:50:00.002-08:00

#----------------------------------------------------------[Declarations]----------------------------------------------------------
#Script Version
$sScriptVersion = "1.0"
#script root

$PSScriptRoot = ($MyInvocation.MyCommand.Path | Split-Path | Resolve-Path).ProviderPath

#logging variables.
$logdir = "$($env:ALLUSERSPROFILE)\InstallLogs"
$Logfile = "$($logdir)\remove_anyconnect_$(get-date -format `"yyyyMMdd_hhmmsstt`").log"

Function LogWrite($string, $color)
{
   if ($Color -eq $null) {$color = "white"}
   write-host $string -foregroundcolor $color
   $string | out-file -Filepath $logfile -append
}

if(!(Test-Path -Path $logdir )){
    New-Item -ItemType directory -Path $logdir
}


########################################
$CP_USER_NAME = (Get-WmiObject Win32_ComputerSystem | Select-Object -ExpandProperty UserName).Split('\')[1]
$user = New-Object System.Security.Principal.NTAccount("corp", "$CP_USER_NAME") 
$sid = $user.Translate([System.Security.Principal.SecurityIdentifier]) 
$userprofile = Get-WmiObject -Namespace root/cimv2 -Class win32_userprofile -Filter "SID='$($sid.value)'"
$CP_USER_HOME = $userprofile.localpath


function stopservices(){
get-service 'ciscod.exe', 'acwebsecagent' | ? { $_.Status -eq 'Started'  } | % {
  $_ | stop-service
  sleep 1
  $result = if (($_ | get-service).Status -eq "Running") {"success"} else {"failure"}
  LogWrite "Service stopped $result"
}
}

Function acuninstall()
{
            $uninstallerfile = "$PSScriptRoot\Uninstall.exe"
            $UninstallSyntax = "-remove -silent"
            $process = Start-Process $uninstallerfile -ArgumentList $UninstallSyntax -Wait -Passthru

            if ($process.ExitCode -eq 0) {
                 LogWrite "AnyConnect has been successfully uninstalled" yellow
            }
            else {
                LogWrite "installer exit code  $($process.ExitCode) for AnyConnect" red
 }
 
}

Function dartuninstall()
{
    
    $dart = Get-WmiObject -Namespace "root\cimv2\sms" -Class SMS_InstalledSoftware | where { $_.ARPDisplayName -match "Cisco AnyConnect Diagnostics" }
    $uninst = $dart.UninstallString -Replace "msiexec.exe","" -Replace "/I","" -Replace "/X",""
    $dartuninstallcode = $uninst.Trim()
 Start-Process "msiexec.exe" -arg "/X $dartuninstallcode /passive /norestart" -Wait
 
}

function startbeforeloginuninstall()
{
 $startbeforelogin = Get-WmiObject -NameSpace "root\cimv2\sms" -class SMS_InstalledSoftware | where { $_.ARPDisplayName -match "Cisco AnyConnect Start Before Login Module"}
 $startbeforeloginuninst = $startbeforelogin.UninstallString -Replace "msiexec.exe", "" -Replace "/I", "" -Replace "/X", ""
 $startbeforeloginuninstcode = $startbeforeloginuninst.Trim()
 Start-Process "msiexec.exe" -arg "/X $startbeforeloginuninstcode /passive /norestart" -Wait
}

function websecurityuninstall()
{
 $websecuritylogin = Get-WmiObject -NameSpace "root\cimv2\sms" -class SMS_InstalledSoftware | where { $_.ARPDisplayName -match "Cisco AnyConnect Web Security Module" }
 $websecurityuninst = $websecuritylogin.UninstallString -Replace "msiexec.exe", "" -Replace "/I", "" -Replace "/X", ""
 $websecurityuninstcode = $websecurityuninst.Trim()
 Start-Process "msiexec.exe" -arg "/X $websecurityuninstcode /passive /norestart" -Wait
}

function postureuninstall()
{
 $posturelogin = Get-WmiObject -NameSpace "root\cimv2\sms" -class SMS_InstalledSoftware | where { $_.ARPDisplayName -match "Cisco AnyConnect Posture Module" }
 $postureuninst = $posturelogin.UninstallString -Replace "msiexec.exe", "" -Replace "/I", "" -Replace "/X", ""
 $postureuninstcode = $postureuninst.Trim()
 Start-Process "msiexec.exe" -arg "/X $postureuninstcode /passive /norestart" -Wait
}

function telemetryuninstall()
{
 $telemetrylogin = Get-WmiObject -NameSpace "root\cimv2\sms" -class SMS_InstalledSoftware | where { $_.ARPDisplayName -match "Cisco AnyConnect Telemetry Module" }
 $telemetryuninst = $telemetrylogin.UninstallString -Replace "msiexec.exe", "" -Replace "/I", "" -Replace "/X", ""
 $telemetryuninstcode = $telemetryuninst.Trim()
 Start-Process "msiexec.exe" -arg "/X $telemetryuninstcode /passive /norestart" -Wait
}
function namuninstall()
{
 $namlogin = Get-WmiObject -NameSpace "root\cimv2\sms" -class SMS_InstalledSoftware | where { $_.ARPDisplayName -match "Cisco AnyConnect Network Access Manager" }
 $namuninst = $namlogin.UninstallString -Replace "msiexec.exe", "" -Replace "/I", "" -Replace "/X", ""
 $namuninstcode = $namuninst.Trim()
 Start-Process "msiexec.exe" -arg "/X $namuninstcode /passive /norestart" -Wait
}

function anyconnectuninstall()
{
 $anyconnectlogin = Get-WmiObject -NameSpace "root\cimv2\sms" -class SMS_InstalledSoftware | where { $_.ARPDisplayName -match "Cisco AnyConnect Secure Mobility Client" }
 $anyconnectuninst = $anyconnectlogin.SoftwareCode
 $anyconnectuninstcode = $anyconnectuninst.Trim()
 Start-Process "msiexec.exe" -arg "/X $anyconnectuninstcode /passive /norestart" -Wait
}

Keynote KITE error: "Unable to load instrumentation headers"

2016-12-07T22:46:00.005-08:00

I checked this issue and was unable to fix it using the KB: https://community.dynatrace.com/community/pages/viewpage.action?pageId=203427725 .

I was able to fix this by:

Migrating Outlook Profile to Office 365

2016-05-15T20:22:00.002-07:00

We had a migration from Hosted Exchange to Office 365 and i was tasked with automating the local Outloook profile migration for Users:

I Created a GUI utility using powershell which would allow users to create an Office365 Profile and set it as default, I prepared PRF files for each version of office and an autodiscover.xml to be used for local autodiscover and uploaded them to a hosted site:

The PRF file to set settings for Office 365 are hard to find: i used the below entries:

;Automatically generated PRF file from the Microsoft Office Customization and Installation Wizard

; **************************************************************
; Section 1 - Profile Defaults
; **************************************************************

[General]
Custom=1
ProfileName=%UserName%-O365
DefaultProfile=Yes
OverwriteProfile=Yes
ModifyDefaultProfileIfPresent=false

; **************************************************************
; Section 2 - Services in Profile
; **************************************************************

[Service List]
;ServiceX=Microsoft Outlook Client
ServiceEGS1=Exchange Global Section
Service1=Microsoft Exchange Server

;***************************************************************
; Section 3 - List of internet accounts
;***************************************************************

[Internet Account List]

;***************************************************************
; Section 4 - Default values for each service.
;***************************************************************

;[ServiceX]
;FormDirectoryPage=
;-- The URL of Exchange Web Services Form Directory page used to create Web forms.
;WebServicesLocation=
;-- The URL of Exchange Web Services page used to display unknown forms.
;ComposeWithWebServices=
;-- Set to true to use Exchange Web Services to compose forms.
;PromptWhenUsingWebServices=
;-- Set to true to use Exchange Web Services to display unknown forms.
;OpenWithWebServices=
;-- Set to true to prompt user before opening unknown forms when using Exchange Web Services.


[ServiceEGS1]
MailboxName=%UserName%@company.com
HomeServer=outlook.office365.com
AccountName=%UserName%@company.com
ConfigFlags=0x00000100
RPCoverHTTPflags=0x002f
RPCProxyServer=outlook.office365.com
RPCProxyPrincipalName=msstd:outlook.com
RPCProxyAuthScheme=0x0001
NetworkLogonSecurity=0x8000F001

[Service1]
OverwriteExistingService=No
UniqueService=No
MailboxName=%UserName%@company.com
HomeServer=outlook.office365.com
OfflineAddressBookPath=%USERPROFILE%\local settings\application data\microsoft\outlook\
OfflineFolderPathAndFilename=%USERPROFILE%\local settings\application data\microsoft\outlook\O365-outlook.ost

;***************************************************************
; Section 5 - Values for each internet account.
;***************************************************************

;***************************************************************
; Section 6 - Mapping for profile properties
;***************************************************************

[Microsoft Exchange Server]
ServiceName=MSEMS
MDBGUID=5494A1C0297F101BA58708002B2A2517
MailboxName=PT_STRING8,0x6607
HomeServer=PT_STRING8,0x6608
OfflineAddressBookPath=PT_STRING8,0x660E
OfflineFolderPathAndFilename=PT_STRING8,0x6610

[Exchange Global Section]
SectionGUID=13dbb0c8aa05101a9bb000aa002fc45a
MailboxName=PT_STRING8,0x6607
HomeServer=PT_STRING8,0x6608
ConfigFlags=PT_LONG,0x6601
RPCoverHTTPflags=PT_LONG,0x6623
RPCProxyServer=PT_UNICODE,0x6622
RPCProxyPrincipalName=PT_UNICODE,0x6625
RPCProxyAuthScheme=PT_LONG,0x6627
AccountName=PT_UNICODE,0x6620
NetworkLogonSecurity=PT_LONG,0x6619

[Microsoft Mail]
ServiceName=MSFS
ServerPath=PT_STRING8,0x6600
Mailbox=PT_STRING8,0x6601
Password=PT_STRING8,0x67f0
RememberPassword=PT_BOOLEAN,0x6606
ConnectionType=PT_LONG,0x6603
UseSessionLog=PT_BOOLEAN,0x6604
SessionLogPath=PT_STRING8,0x6605
EnableUpload=PT_BOOLEAN,0x6620
EnableDownload=PT_BOOLEAN,0x6621
UploadMask=PT_LONG,0x6622
NetBiosNotification=PT_BOOLEAN,0x6623
NewMailPollInterval=PT_STRING8,0x6624
DisplayGalOnly=PT_BOOLEAN,0x6625
UseHeadersOnLAN=PT_BOOLEAN,0x6630
UseLocalAdressBookOnLAN=PT_BOOLEAN,0x6631
UseExternalToHelpDeliverOnLAN=PT_BOOLEAN,0x6632
UseHeadersOnRAS=PT_BOOLEAN,0x6640
UseLocalAdressBookOnRAS=PT_BOOLEAN,0x6641
UseExternalToHelpDeliverOnRAS=PT_BOOLEAN,0x6639
ConnectOnStartup=PT_BOOLEAN,0x6642
DisconnectAfterRetrieveHeaders=PT_BOOLEAN,0x6643
DisconnectAfterRetrieveMail=PT_BOOLEAN,0x6644
DisconnectOnExit=PT_BOOLEAN,0x6645
DefaultDialupConnectionName=PT_STRING8,0x6646
DialupRetryCount=PT_STRING8,0x6648
DialupRetryDelay=PT_STRING8,0x6649

[Personal Folders]
ServiceName=MSPST MS
Name=PT_STRING8,0x3001
PathAndFilenameToPersonalFolders=PT_STRING8,0x6700 
RememberPassword=PT_BOOLEAN,0x6701
EncryptionType=PT_LONG,0x6702
Password=PT_STRING8,0x6703

[Unicode Personal Folders]
ServiceName=MSUPST MS
Name=PT_UNICODE,0x3001
PathAndFilenameToPersonalFolders=PT_STRING8,0x6700 
RememberPassword=PT_BOOLEAN,0x6701
EncryptionType=PT_LONG,0x6702
Password=PT_STRING8,0x6703

[Outlook Address Book]
ServiceName=CONTAB

[LDAP Directory]
ServiceName=EMABLT
ServerName=PT_STRING8,0x6600
UserName=PT_STRING8,0x6602
UseSSL=PT_BOOLEAN,0x6613
UseSPA=PT_BOOLEAN,0x6615
EnableBrowsing=PT_BOOLEAN,0x6622
DisplayName=PT_STRING8,0x3001
ConnectionPort=PT_STRING8,0x6601
SearchTimeout=PT_STRING8,0x6607
MaxEntriesReturned=PT_STRING8,0x6608
SearchBase=PT_STRING8,0x6603
CheckNames=PT_STRING8,0x6624
DefaultSearch=PT_LONG,0x6623

[Microsoft Outlook Client]
SectionGUID=0a0d020000000000c000000000000046
FormDirectoryPage=PT_STRING8,0x0270
WebServicesLocation=PT_STRING8,0x0271
ComposeWithWebServices=PT_BOOLEAN,0x0272
PromptWhenUsingWebServices=PT_BOOLEAN,0x0273
OpenWithWebServices=PT_BOOLEAN,0x0274
CachedExchangeMode=PT_LONG,0x041f
CachedExchangeSlowDetect=PT_BOOLEAN,0x0420

[Personal Address Book]
ServiceName=MSPST AB
NameOfPAB=PT_STRING8,0x001e3001
PathAndFilename=PT_STRING8,0x001e6600
ShowNamesBy=PT_LONG,0x00036601

; ************************************************************************
; Section 7 - Mapping for internet account properties.  DO NOT MODIFY.
; ************************************************************************

[I_Mail]
AccountType=POP3
;--- POP3 Account Settings ---
AccountName=PT_UNICODE,0x0002
DisplayName=PT_UNICODE,0x000B
EmailAddress=PT_UNICODE,0x000C
;--- POP3 Account Settings ---
POP3Server=PT_UNICODE,0x0100
POP3UserName=PT_UNICODE,0x0101
POP3UseSPA=PT_LONG,0x0108
Organization=PT_UNICODE,0x0107
ReplyEmailAddress=PT_UNICODE,0x0103
POP3Port=PT_LONG,0x0104
POP3UseSSL=PT_LONG,0x0105
; --- SMTP Account Settings ---
SMTPServer=PT_UNICODE,0x0200
SMTPUseAuth=PT_LONG,0x0203
SMTPAuthMethod=PT_LONG,0x0208
SMTPUserName=PT_UNICODE,0x0204
SMTPUseSPA=PT_LONG,0x0207
ConnectionType=PT_LONG,0x000F
ConnectionOID=PT_UNICODE,0x0010
SMTPPort=PT_LONG,0x0201
SMTPSecureConnection=PT_LONG,0x020A
ServerTimeOut=PT_LONG,0x0209
LeaveOnServer=PT_LONG,0x1000

[IMAP_I_Mail]
AccountType=IMAP
;--- IMAP Account Settings ---
AccountName=PT_UNICODE,0x0002
DisplayName=PT_UNICODE,0x000B
EmailAddress=PT_UNICODE,0x000C
;--- IMAP Account Settings ---
IMAPServer=PT_UNICODE,0x0100
IMAPUserName=PT_UNICODE,0x0101
IMAPUseSPA=PT_LONG,0x0108
Organization=PT_UNICODE,0x0107
ReplyEmailAddress=PT_UNICODE,0x0103
IMAPPort=PT_LONG,0x0104
IMAPUseSSL=PT_LONG,0x0105
; --- SMTP Account Settings ---
SMTPServer=PT_UNICODE,0x0200
SMTPUseAuth=PT_LONG,0x0203
SMTPAuthMethod=PT_LONG,0x0208
SMTPUserName=PT_UNICODE,0x0204
SMTPUseSPA=PT_LONG,0x0207
ConnectionType=PT_LONG,0x000F
ConnectionOID=PT_UNICODE,0x0010
SMTPPort=PT_LONG,0x0201
SMTPSecureConnection=PT_LONG,0x020A
ServerTimeOut=PT_LONG,0x0209
CheckNewImap=PT_LONG,0x1100
RootFolder=PT_UNICODE,0x1101
Account=PT_UNICODE,0x0002
HttpServer=PT_UNICODE,0x0100
UserName=PT_UNICODE,0x0101
Organization=PT_UNICODE,0x0107
UseSPA=PT_LONG,0x0108
TimeOut=PT_LONG,0x0209
Reply=PT_UNICODE,0x0103
EmailAddress=PT_UNICODE,0x000C
FullName=PT_UNICODE,0x000B
Connection Type=PT_LONG,0x000F
ConnectOID=PT_UNICODE,0x0010

The Outlook Office 365 migration utility was created to assist with the creation of a local office 365 outlook profile for FICO users. When run, the below screen shows up,

When the user clicks 'Migrate Outlook to Office365' It makes the following changes:
1: Downloads an Autodiscover file to the folder %AppData%\FICO-AD

2: Downloads a .PRF file (PRF varies by installed Office version) to the folder %UserProfile%\Documents\Office365-PRF

3: Creates the following registry keys:

Registry Key Path	Value Name	Value	Type	Action
HKCU:\Software\Microsoft\Office\*.0\Outlook\cached mode	syncwindowsetting	3	DWORD'	Created
HKCU:\Software\Microsoft\Office\*.0\Outlook\AutoDiscover	ExcludeHttpRedirect	0	DWORD'	Created
HKCU:\Software\Microsoft\Office\*.0\Outlook\AutoDiscover	ExcludeHttpsAutodiscoverDomain	1	DWORD'	Created
HKCU:\Software\Microsoft\Office\*.0\Outlook\AutoDiscover	ExcludeHttpsRootDomain	1	DWORD'	Created
HKCU:\Software\Microsoft\Office\*.0\Outlook\AutoDiscover	ExcludeScpLookup	1	DWORD'	Created
HKCU:\Software\Microsoft\Office\*.0\Outlook\AutoDiscover	ExcludeSrvLookup	1	DWORD'	Created
HKCU:\Software\Microsoft\Office\*.0\Outlook\AutoDiscover	ExcludeSrvRecord	1	DWORD'	Created
HKCU:\Software\Microsoft\Office\*.0\Outlook\AutoDiscover	fico.com		String	Created
HKCU:\Software\Microsoft\Office\*.0\Outlook\AutoDiscover	PreferLocalXML	1	DWORD'	Created
HKCU:\Software\Microsoft\Office\*.0\Outlook\Setup	ImportPRF		String	Created
HKCU:\Software\FICO	%UserName%-O365		String	Created

4: And deletes the following Registry Value:

Registry Key Path	Value Name	Value	Type	Action
HKCU:\Software\Microsoft\Office\*.0\Outlook\Setup	First-Run		String	Deleted

5: A log file is created and displayed in a textbox within the utility itself, a local copy of the log file can be found at :
%temp%/FICO_O365_Profile_

format `"yyyyMMdd_hhmmsstt`>.log

6: Once the utility is done running successfully for the first time it Displays a list of changes made and the user is prompted to restart Outlook as shown below:

7: When Outlook is restarted, the it responds to the first-run key being deleted by attempting to configure the current user's profile again with the .PRF file specified in the Registry value:

HKCU:\Software\Microsoft\Office\15.0\Outlook\Setup\ImportPRF

8: When successful, Outlook will prompt for the logged in user's credentials by presenting a authentication box,
The username will need to be the user's email address and password will be CORP password :

9: Once Authentication is successful and the user's Identity is verified a Outlook Profile (%UserName%-O365) is created, the existing Outlook profile is left untouched.

Re-running the utility:

When a user attempts to re-run the utility he will be prompted to delete the HKCU\Software\company key in order to allow it to re-run :

if you'd like to re-run the utility, please perform the following steps:

1: Open Mail in Control Panel and click 'Show Profiles' select the newly created profile and click 'remove'.

2: Delete the Registry Key HKCU:\Software\company

The Code for the Action 'Migrate Outlook to Office 365' is as follows:

#####Logging functions######
  $Logfile = "${Env:TEMP}\FICO_O365_Profile_$(get-date -format `"yyyyMMdd_hhmmsstt`").log"
  Function LogWrite($string, $color)
  {
   if ($Color -eq $null) { $color = "white" }
   write-host $string -foregroundcolor $color
   $string | out-file -Filepath $logfile -append
  }
  
  function CreateRegistryKey([string]$keyPath)
  {
   if (-not (Test-Path $keyPath))
   {
    New-Item -Path "$keyPath";
   }
  }
  
  function CreateRegistryKeys([string]$rootKey)
  {
   [string]$keyPath = [String]::Format("{0}:", $rootKey);
   
   foreach ($keyName in $args)
   {
    [string]$keyPath = [String]::Format("{0}\{1}", $keyPath, $keyName);
    CreateRegistryKey $keyPath;
   }
  }
  
  function DeleteRegistryKey([string]$rootKey, [string]$keyName)
  {
   [string]$keyPath = [String]::Format("{0}:\{1}", $rootKey, $keyName);
   
   if (Test-Path $keyPath)
   {
    Remove-Item -Path "$keyPath" -Recurse;
   }
  }
  
  function Test-RegistryEntry ([string]$key, [string]$name)
  {
   Get-ItemProperty -Path $key -Name $name -ErrorAction SilentlyContinue | Out-Null;
   return $?;
  }
  function Read-RegistryEntry ([string]$key, [string]$name)
  {
   if (Test-RegistryEntry $key $name)
   {
    return (Get-ItemProperty -Path $key -Name $name).$name;
   }
   else
   {
    return '';
   }
  }
  
  function Set-RegistryEntry ([string]$key, [string]$name, [string]$value, [string]$type = 'String')
  {
   if (-not (Test-RegistryEntry $key $name))
   {
    if (($type -eq 'DWORD') -or ($type -eq 'String'))
    {
     New-ItemProperty -Path $key -Name $name -PropertyType $type -Value $value;
    }
   }
   else
   {
    Set-ItemProperty -Path $key -Name $name -Value $value;
    Write-Output "The Entry [$key/$name = $value] is modified.";
   }
  }
  
  function Rename-RegistryEntry ([string]$key, [string]$name, [string]$newName)
  {
   if (Test-RegistryEntry $key $name)
   {
    Rename-ItemProperty -Path $key -Name $name -NewName $newName;
   }
  }
  
  function Remove-RegistryEntry ([string]$key, [string]$name)
  {
   if (Test-RegistryEntry $key $name)
   {
    Remove-ItemProperty -Path $key -Name $name;
   }
  }
  
  function Download-AutoD ()
  {
   $ficoaddir = "${Env:APPDATA}\FICO-AD"
   if (!(Test-Path -Path $ficoaddir))
   {
    New-Item -ItemType directory -Path $ficoaddir
   }
   $ficoadloc = "${Env:APPDATA}\FICO-AD\autodiscover.xml"
   $adurl = "https://autodiscover.xmlurl.xml"
   $wc = New-Object System.Net.WebClient
   $wc.DownloadFile($adurl, $ficoadloc)
   if ($?)
   {
    LogWrite "autodiscover.xml downloaded to $ficoadloc" green
   }
   else
   {
    Write-Error "Download of autodisover.xml failed"
    LogWrite "Download of autodiscover.xml failed" -color red
   }
  }
  #####################End of function###############
  #get current username
  $suname = [Security.Principal.WindowsIdentity]::GetCurrent().Name
  $CP_USER_NAME = $suname.replace("$ENV:USERDOMAIN\", "")
  #Concatenate it with nonsensical abbrv so that the place holder key is username-abbrv
  $holder = $CP_USER_NAME + '-O365'
  ### Need to Check for placeholder and exit if the value exists ###
  $placeholder = "HKCU:\Software\FICO\$holder"
  
 
  function Write-TextBox
  {
   param ([string]$text)
   $richtextbox1.Text += "$text`n"
  }
  
  $testdone = Test-Path $placeholder
  If ($testdone -eq $true)
  {
   #Exit ##because script has run previously.
   LogWrite "This script has been run previously, HKCU\Software\FICO detected, delete this key if you want to re-run this script" red
   Write-Error "This script has been run previously, HKCU\Software\FICO detected, delete this key if you want to re-run this script"
   
  }
  ElseIf ($testdone -eq $false)
  {
   $prfloc = "${Env:USERPROFILE}\Documents\Office365-PRF"
   if (!(Test-Path -Path $prfloc))
   {
    New-Item -ItemType directory -Path $prfloc
   }
   Download-AutoD
   #if the Installed outlookversion is 2010
   If (Test-Path HKCU:'\Software\Microsoft\Office\14.0\Outlook\Setup')
   {
    if (Test-Path "${Env:ProgramFiles(x86)}\Microsoft Office\Office14\Outlook.exe")
    {
     $url = "https://prffileurl.prf"
     $localPath = "$prfloc\Office365-2010-x86.PRF"
     $wc = New-Object System.Net.WebClient
     $wc.DownloadFile($url, $localPath)
     if ($?)
     {
      LogWrite "Office 2010 x86 installed" red
      $regkeypath = "HKCU:\Software\Microsoft\Office\14.0\Outlook\AutoDiscover"
      $valuevalue = "fico.com"
      $value1 = (Get-ItemProperty $regkeypath).$valuevalue -eq $null
      If ($value1 -eq $False)
      {
       Remove-RegistryEntry $regkeypath $valuevalue
       LogWrite "fico.com registry value deleted" yellow
      }
      Else
      {
       LogWrite "The autodiscover value fico.com does not exist" red
      }
      Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\14.0\Outlook\cached mode' 'syncwindowsetting' '3' 'DWORD'
      Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\14.0\Outlook\AutoDiscover' 'ExcludeHttpRedirect' '0' 'DWORD'
      Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\14.0\Outlook\AutoDiscover' 'ExcludeHttpsAutodiscoverDomain' '1' 'DWORD'
      Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\14.0\Outlook\AutoDiscover' 'ExcludeHttpsRootDomain' '1' 'DWORD'
      Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\14.0\Outlook\AutoDiscover' 'ExcludeScpLookup' '1' 'DWORD'
      Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\14.0\Outlook\AutoDiscover' 'ExcludeSrvLookup' '1' 'DWORD'
      Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\14.0\Outlook\AutoDiscover' 'ExcludeSrvRecord' '1' 'DWORD'
      Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\14.0\Outlook\AutoDiscover' 'fico.com' "${Env:APPDATA}\FICO-AD\autodiscover.xml"
      LogWrite "Set autodiscover entry" green
      Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\14.0\Outlook\AutoDiscover' 'PreferLocalXML' '1' 'DWORD'
      LogWrite "Set PreferLocalXML" green
      Remove-RegistryEntry "HKCU:\Software\Microsoft\Office\14.0\Outlook\Setup" 'First-Run'
      LogWrite "Deleted First-run key" yellow
      Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\14.0\Outlook\Setup' 'ImportPRF' "${Env:USERPROFILE}\Documents\Office365-PRF\office365-2010-x86.PRF"
      LogWrite "ImportPRF key applied" yellow
      New-Item -Path HKCU:\Software\FICO -Name $holder -Value "Default Value" -Force -ErrorAction SilentlyContinue
      New-ItemProperty -Path $placeholder -Name "Done" -PropertyType "String" -Value 'yes' -ErrorAction SilentlyContinue
      LogWrite "Created Placeholder at HKCU:\Software\FICO" yellow
     }
     else
     {
      Write-Error "Download of PRF file failed"
      LogWrite "Download of PRF file failed" -color red
     }
    }
    
    elseif (Test-Path "${Env:ProgramFiles}\Microsoft Office\Office14\Outlook.exe")
    {
     $url = "https://prffileurl.prf"
     $localPath = "$prfloc\Office365-2010-x64.PRF"
     $wc = New-Object System.Net.WebClient
     $wc.DownloadFile($url, $localPath)
     if ($?)
     {
      LogWrite "Office 2010 x64 installed" red
      $regkeypath = "HKCU:\Software\Microsoft\Office\14.0\Outlook\AutoDiscover"
      $valuevalue = "fico.com"
      $value1 = (Get-ItemProperty $regkeypath).$valuevalue -eq $null
      If ($value1 -eq $False)
      {
       Remove-RegistryEntry $regkeypath $valuevalue
       LogWrite "fico.com registry value deleted" yellow
      }
      Else
      {
       LogWrite "The autodiscover value fico.com does not exist" red
      }
      Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\14.0\Outlook\cached mode' 'syncwindowsetting' '3' 'DWORD'
      Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\14.0\Outlook\AutoDiscover' 'ExcludeHttpRedirect' '0' 'DWORD'
      Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\14.0\Outlook\AutoDiscover' 'ExcludeHttpsAutodiscoverDomain' '1' 'DWORD'
      Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\14.0\Outlook\AutoDiscover' 'ExcludeHttpsRootDomain' '1' 'DWORD'
      Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\14.0\Outlook\AutoDiscover' 'ExcludeScpLookup' '1' 'DWORD'
      Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\14.0\Outlook\AutoDiscover' 'ExcludeSrvLookup' '1' 'DWORD'
      Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\14.0\Outlook\AutoDiscover' 'ExcludeSrvRecord' '1' 'DWORD'
      
      Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\14.0\Outlook\AutoDiscover' 'fico.com' "${Env:APPDATA}\FICO-AD\autodiscover.xml"
      LogWrite "Set autodiscover entry" green
      Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\14.0\Outlook\AutoDiscover' 'PreferLocalXML' '1' 'DWORD'
      LogWrite "Set PreferLocalXML" green
      Remove-ItemProperty -Name 'First-Run' -Path "HKCU:\Software\Microsoft\Office\14.0\Outlook\Setup" -ErrorAction SilentlyContinue
      LogWrite "Deleted First-run key" yellow
      Set-ItemProperty -Path 'Registry::HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Outlook\Setup' -Name ImportPRF -Value "${Env:USERPROFILE}\Documents\Office365-PRF\office365-2010-x66.PRF" -type String -ErrorAction SilentlyContinue
      LogWrite "ImportPRF key applied" yellow
      New-Item -Path HKCU:\Software\FICO -Name $holder -Value "Default Value" -Force -ErrorAction SilentlyContinue
      New-ItemProperty -Path $placeholder -Name "Done" -PropertyType "String" -Value 'yes' -ErrorAction SilentlyContinue
      LogWrite "Created Placeholder at HKCU:\Software\FICO" yellow
     }
     else
     {
      Write-Error "Download of PRF file failed"
      LogWrite "Download of PRF file failed" -color red
     }
    }
    
   }
   ElseIf ((Test-Path HKCU:'\Software\Microsoft\Office\14.0\Outlook\Setup') -eq $False)
   {
    LogWrite "Office 2010 is not installed" red
   }
   
   #if the Installed outlookversion is 2013
   If (Test-Path HKCU:'\Software\Microsoft\Office\15.0\Outlook\Setup')
   {
    #Set keys for outlook 2013
    Download-AutoD
    LogWrite "Office 2013 exists" blue
    if (Test-Path "${Env:ProgramFiles(x86)}\Microsoft Office\Office15\Outlook.exe")
    {
     $url = "https://prffileurl.prf"
     $localPath = "$prfloc\Office365-2013-x86.PRF"
     $wc = New-Object System.Net.WebClient
     $wc.DownloadFile($url, $localPath)
     if ($?)
     {
      $regkeypath = "HKCU:\Software\Microsoft\Office\15.0\Outlook\AutoDiscover"
      $valuevalue = "fico.com"
      $value1 = (Get-ItemProperty $regkeypath).$valuevalue -eq $null
      If ($value1 -eq $False)
      {
       Remove-RegistryEntry $regkeypath $valuevalue
       LogWrite "fico.com registry value deleted" yellow
      }
      Else
      {
       LogWrite "The autodiscover value comany.com does not exist" red
      }
      Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\15.0\Outlook\cached mode' 'syncwindowsetting' '3' 'DWORD'
      Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\15.0\Outlook\AutoDiscover' 'ExcludeHttpRedirect' '0' 'DWORD'
      Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\15.0\Outlook\AutoDiscover' 'ExcludeHttpsAutodiscoverDomain' '1' 'DWORD'
      Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\15.0\Outlook\AutoDiscover' 'ExcludeHttpsRootDomain' '1' 'DWORD'
      Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\15.0\Outlook\AutoDiscover' 'ExcludeScpLookup' '1' 'DWORD'
      Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\15.0\Outlook\AutoDiscover' 'ExcludeSrvLookup' '1' 'DWORD'
      Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\15.0\Outlook\AutoDiscover' 'ExcludeSrvRecord' '1' 'DWORD'
      
      Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\15.0\Outlook\AutoDiscover' 'fico.com' "${Env:APPDATA}\FICO-AD\autodiscover.xml"
      LogWrite "Set autodiscover entry" green
      Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\15.0\Outlook\AutoDiscover' 'PreferLocalXML' '1' 'DWORD'
      LogWrite "Set PreferLocalXML" green
      Remove-ItemProperty -Name 'First-Run' -Path "HKCU:\Software\Microsoft\Office\15.0\Outlook\Setup" -ErrorAction SilentlyContinue
      LogWrite "Deleted First-run key" yellow
      Set-ItemProperty -Path 'Registry::HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Outlook\Setup' -Name ImportPRF -Value "${Env:USERPROFILE}\Documents\Office365-PRF\office365-2013-x86.PRF" -type String -ErrorAction SilentlyContinue
      LogWrite "ImportPRF key applied" yellow
      New-Item -Path HKCU:\Software\FICO -Name $holder -Value "Default Value" -Force -ErrorAction SilentlyContinue
      New-ItemProperty -Path $placeholder -Name "Done" -PropertyType "String" -Value 'yes' -ErrorAction SilentlyContinue
      LogWrite "Created Placeholder at HKCU:\Software\FICO" yellow
     }
     else
     {
      Write-Error "Download of PRF file failed"
      LogWrite "Download of PRF file failed" -color red
     }
    }
    elseif (Test-Path "${Env:ProgramFiles}\Microsoft Office\Office15\Outlook.exe")
    {
     $url = "https://prffileurl.prf"
     $localPath = "$prfloc\Office365-2013-x64.PRF"
     $wc = New-Object System.Net.WebClient
     $wc.DownloadFile($url, $localPath)
     if ($?)
     {
      $regkeypath = "HKCU:\Software\Microsoft\Office\15.0\Outlook\AutoDiscover"
      $valuevalue = "fico.com"
      $value1 = (Get-ItemProperty $regkeypath).$valuevalue -eq $null
      If ($value1 -eq $False)
      {
       Remove-RegistryEntry $regkeypath $valuevalue
       LogWrite "fico.com registry value deleted" yellow
      }
      Else
      {
       LogWrite "The autodiscover value fico.com does not exist" red
      }
      Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\15.0\Outlook\cached mode' 'syncwindowsetting' '3' 'DWORD'
      Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\15.0\Outlook\AutoDiscover' 'ExcludeHttpRedirect' '0' 'DWORD'
      Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\15.0\Outlook\AutoDiscover' 'ExcludeHttpsAutodiscoverDomain' '1' 'DWORD'
      Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\15.0\Outlook\AutoDiscover' 'ExcludeHttpsRootDomain' '1' 'DWORD'
      Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\15.0\Outlook\AutoDiscover' 'ExcludeScpLookup' '1' 'DWORD'
      Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\15.0\Outlook\AutoDiscover' 'ExcludeSrvLookup' '1' 'DWORD'
      Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\15.0\Outlook\AutoDiscover' 'ExcludeSrvRecord' '1' 'DWORD'
      
      Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\15.0\Outlook\AutoDiscover' 'fico.com' "${Env:APPDATA}\FICO-AD\autodiscover.xml"
      LogWrite "Set autodiscover entry" green
      Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\15.0\Outlook\AutoDiscover' 'PreferLocalXML' '1' 'DWORD'
      LogWrite "Set PreferLocalXML" green
      Remove-ItemProperty -Name 'First-Run' -Path "HKCU:\Software\Microsoft\Office\15.0\Outlook\Setup" -ErrorAction SilentlyContinue
      LogWrite "Deleted First-run key" yellow
      Set-ItemProperty -Path 'Registry::HKEY_CURRENT_USER\Software\Microsoft\Office\15.0\Outlook\Setup' -Name ImportPRF -Value "${Env:USERPROFILE}\Documents\Office365-PRF\office365-2013-x64.PRF" -type String -ErrorAction SilentlyContinue
      LogWrite "ImportPRF key applied" yellow
      New-Item -Path HKCU:\Software\FICO -Name $holder -Value "Default Value" -Force -ErrorAction SilentlyContinue
      New-ItemProperty -Path $placeholder -Name "Done" -PropertyType "String" -Value 'yes' -ErrorAction SilentlyContinue
      LogWrite "Created Placeholder at HKCU:\Software\FICO" yellow
     }
     else
     {
      Write-Error "Download of PRF file failed"
      LogWrite "Download of PRF file failed" -color red
     }
    }
   }
   ElseIf ((Test-Path HKCU:'\Software\Microsoft\Office\15.0\Outlook\Setup') -eq $False)
   {
    LogWrite "Office 2013 is not installed" red
   }
   #if the Installed outlookversion is 2016
   $2016installed = Get-WmiObject -Namespace 'root\cimv2\sms' -Class SMS_InstalledSoftware | where { $_.ARPDisplayName -match 'Office Professional Plus 2016' }
   if ($2016installed)
   {
    Download-AutoD
    LogWrite "Office Professional Plus 2016 exists, will not apply PRF because its not supported.. please uninstall it " blue
    $regkeypath = "HKCU:\Software\Microsoft\Office\16.0\Outlook\AutoDiscover"
    $valuevalue = "fico.com"
    $value1 = (Get-ItemProperty $regkeypath).$valuevalue -eq $null
    If ($value1 -eq $False)
    {
     Remove-RegistryEntry $regkeypath $valuevalue
     LogWrite "fico.com registry value deleted" yellow
    }
    Else
    {
     LogWrite "The autodiscover value fico.com does not exist" red
    }
    Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\16.0\Outlook\cached mode' 'syncwindowsetting' '3' 'DWORD'
    Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\16.0\Outlook\AutoDiscover' 'ExcludeHttpRedirect' '0' 'DWORD'
    Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\16.0\Outlook\AutoDiscover' 'ExcludeHttpsAutodiscoverDomain' '1' 'DWORD'
    Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\16.0\Outlook\AutoDiscover' 'ExcludeHttpsRootDomain' '1' 'DWORD'
    Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\16.0\Outlook\AutoDiscover' 'ExcludeScpLookup' '1' 'DWORD'
    Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\16.0\Outlook\AutoDiscover' 'ExcludeSrvLookup' '1' 'DWORD'
    Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\16.0\Outlook\AutoDiscover' 'ExcludeSrvRecord' '1' 'DWORD'
    
    Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\16.0\Outlook\AutoDiscover' 'fico.com' "${Env:APPDATA}\FICO-AD\autodiscover.xml"
    LogWrite "Set autodiscover entry" green
    Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\16.0\Outlook\AutoDiscover' 'PreferLocalXML' '1' 'DWORD'
    LogWrite "Set PreferLocalXML" green
    New-Item -Path HKCU:\Software\FICO -Name $holder -Value "Default Value" -Force -ErrorAction SilentlyContinue
    New-ItemProperty -Path $placeholder -Name "Done" -PropertyType "String" -Value 'yes' -ErrorAction SilentlyContinue
    LogWrite "Created Placeholder at HKCU:\Software\FICO" yellow
   }
   #if the Installed outlookversion is 365 proplus
   $365proplusinstalled = Get-WmiObject -Namespace 'root\cimv2\sms' -Class SMS_InstalledSoftware | where { $_.ARPDisplayName -match 'Office 365' }
   if ($365proplusinstalled)
   {
    Download-AutoD
    LogWrite "Office 365 pro plus installed, will not apply PRF because its not supported, please uninstall it" red
    $regkeypath = "HKCU:\Software\Microsoft\Office\16.0\Outlook\AutoDiscover"
    $valuevalue = "fico.com"
    $value1 = (Get-ItemProperty $regkeypath).$valuevalue -eq $null
    If ($value1 -eq $False)
    {
     Remove-RegistryEntry $regkeypath $valuevalue
     LogWrite "fico.com registry value deleted" yellow
    }
    Else
    {
     LogWrite "The autodiscover value fico.com does not exist" red
    }
    Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\16.0\Outlook\cached mode' 'syncwindowsetting' '3' 'DWORD'
    Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\16.0\Outlook\AutoDiscover' 'ExcludeHttpRedirect' '0' 'DWORD'
    Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\16.0\Outlook\AutoDiscover' 'ExcludeHttpsAutodiscoverDomain' '1' 'DWORD'
    Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\16.0\Outlook\AutoDiscover' 'ExcludeHttpsRootDomain' '1' 'DWORD'
    Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\16.0\Outlook\AutoDiscover' 'ExcludeScpLookup' '1' 'DWORD'
    Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\16.0\Outlook\AutoDiscover' 'ExcludeSrvLookup' '1' 'DWORD'
    Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\16.0\Outlook\AutoDiscover' 'ExcludeSrvRecord' '1' 'DWORD'
    
    Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\16.0\Outlook\AutoDiscover' 'fico.com' "${Env:APPDATA}\FICO-AD\autodiscover.xml"
    LogWrite "Set autodiscover entry" green
    Set-RegistryEntry 'HKCU:\Software\Microsoft\Office\16.0\Outlook\AutoDiscover' 'PreferLocalXML' '1' 'DWORD'
    LogWrite "Set PreferLocalXML" green
    New-Item -Path HKCU:\Software\FICO -Name $holder -Value "Default Value" -Force -ErrorAction SilentlyContinue
    New-ItemProperty -Path $placeholder -Name "Done" -PropertyType "String" -Value 'yes' -ErrorAction SilentlyContinue
    LogWrite "Created Placeholder at HKCU:\Software\FICO" yellow
   }
   LogWrite "" white
   LogWrite "" white
   LogWrite "" white
   LogWrite "Office 365 Outlook profile set, please restart outlook to sign into office 365" yellow
   LogWrite "if your office 365 profile is not configured please open a ticket with:" yellow
   LogWrite "Company It services at http://URL/" yellow
   
  }
  $dateTimeString = [System.DateTime]::Now.ToString("yyyy.MM.dd hh:mm:ss")
  $richtextbox1.SelectionColor = 'Red'
  $logfilereader = Get-Content $Logfile
  
  foreach ($line in $Logfile)
  {
   $richtextbox1.Text += "`n" + $dateTimeString + " - " + $line + "`n"
  }
  
  <#cd $Env:USERPROFILE
  Clear-Host
  Write-Host -ForegroundColor DarkMagenta "**** GTS" 
  Write-Host "Office365 Outlook setup is complete."
  Write-Host "Please restart Outlook to setup your new account."
  Write-host "You may close this window now"
  $global:ExitCode = 0 #Set the exit code for the Packager
  #>
  #notepad $Logfile
 }

Powershell Script to install MS Office Templates

2016-02-13T08:15:00.001-08:00

To deploy custom Office templates for users first create the templates , preview image files and thumbnail image files per the MS article: https://technet.microsoft.com/en-us/library/cc178976%28v=office.14%29.aspx#section4 and create a .reg file to set the provider keys to point to the XML, create different reg files for office 2010 and 2013, change the service URL to whatever location the XML is located at :

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Common\Spotlight\Providers\Workaround]
"ServiceURL"="C:\\Program Files (x86)\\Microsoft Office\\Templates\\Workaround\\Workaround_Templates.xml"

Place templates, images and the XML into a folder within the script and adjust the variables in the script accordingly:

#############Install FICO templates####################
#Author: tausif
#Company: FICO
#Date: 13/02/2016

#---------------------------------------------------------[Initialisations]--------------------------------------------------------

#Set Error Action to Silently Continue
#$ErrorActionPreference = "SilentlyContinue"

#----------------------------------------------------------[Declarations]----------------------------------------------------------

#Script Version
$sScriptVersion = "1.0"
#script root

$PSScriptRoot = ($MyInvocation.MyCommand.Path | Split-Path | Resolve-Path).ProviderPath

#logging variables.
$logdir = "$($env:ALLUSERSPROFILE)\InstallLogs"
$Logfile = "$($logdir)\FICO_2016_Templates_$(get-date -format `"yyyyMMdd_hhmmsstt`").log"

$FICOTEMPLATESDIR = "$($env:ALLUSERSPROFILE)\FICO Templates"
$PROGRAMDATA = $env:ALLUSERSPROFILE

Function LogWrite($string, $color)
{
   if ($Color -eq $null) {$color = "white"}
   write-host $string -foregroundcolor $color
   $string | out-file -Filepath $logfile -append
}

if(!(Test-Path -Path $logdir )){
    New-Item -ItemType directory -Path $logdir
}


########################################

$CP_USER_NAME = (Get-WmiObject Win32_ComputerSystem | Select-Object -ExpandProperty UserName).Split('\')[1]
$user = New-Object System.Security.Principal.NTAccount("corp", "$CP_USER_NAME") 
$sid = $user.Translate([System.Security.Principal.SecurityIdentifier]) 
$userprofile = Get-WmiObject -Namespace root/cimv2 -Class win32_userprofile -Filter "SID='$($sid.value)'"
$CP_USER_HOME = $userprofile.localpath
$CP_USER_TEMPLATESDIR = "$CP_USER_HOME" + "\" + "AppData\Roaming\Microsoft\Templates"
$FICO_USER_TEMPLATESDIR = "$CP_USER_HOME" + "\" + "AppData\Roaming\Microsoft\Templates\FICO Templates"

if(Test-Path -Path $FICOTEMPLATESDIR){
    Remove-Item -Path $FICOTEMPLATESDIR -Force -Recurse
    LogWrite "Removed existing older Template provider keys"
}

Copy-Item "$PSScriptRoot\FICO Templates" -Destination $PROGRAMDATA -Force -Recurse
LogWrite "Copied Office templates to destination"

# Set PowerPoint exe locations
$x86_PP_2013 = "${env:PROGRAMFILES(X86)}\Microsoft Office\Office15\POWERPNT.EXE"
$x64_PP_2013 = "${env:COMMONPROGRAMFILES}\Microsoft Office\Office15\POWERPNT.EXE"
$x86_PP_2010 = "${env:PROGRAMFILES(X86)}\Microsoft Office\Office14\POWERPNT.EXE"
$x64_PP_2010 = "${env:COMMONPROGRAMFILES}\Microsoft Office\Office14\POWERPNT.EXE"

#Set providers using reg files
$2010 = "$PSScriptRoot\2010.reg"
$2013 = "$PSScriptRoot\2013.reg"

# X64 OS and Office 2013
if (test-path $x64_PP_2013)
    { 
        LogWrite "64 bit office present"
        Remove-Item -Path HKCU:\Software\Microsoft\Office\15.0\Common\Spotlight\Providers\* -Recurse
        Remove-Item -Path HKCU:\Software\Microsoft\Office\15.0\Common\Spotlight\Content\* -Recurse
        $import = $(Start-Process "regedit.exe" -argumentlist ("/s", "$2013") -Wait -PassThru)
        if ($import.ExitCode -eq 0){
            LogWrite "Templates for Office 2013 have been successfully installed" -color yellow
        }
            else {
            LogWrite "installer exit code  $($import.ExitCode) for file  $($msifile)" -color red
        }
    }
 
# X64 OS and Office 2010
if (test-path $x64_PP_2010)
    { 
        LogWrite "64 bit office 2010 present"
        Remove-Item -Path HKCU:\Software\Microsoft\Office\14.0\Common\Spotlight\Providers\* -Recurse
        Remove-Item -Path HKCU:\Software\Microsoft\Office\15.0\Common\Spotlight\Content\* -Recurse
        $import = $(Start-Process "regedit.exe" -argumentlist ("/s", "$2010") -Wait -PassThru)
        if ($import.ExitCode -eq 0){
            LogWrite "Templates for Office 2010 have been successfully installed" -color yellow
        }
            else {
            LogWrite "installer exit code $($import.ExitCode)" -color red
        }
    }
# X86 OS and Office 2013
if (test-path $x86_PP_2013)
    { 
        LogWrite "32 bit office 2013 present"
        Remove-Item -Path HKCU:\Software\Microsoft\Office\14.0\Common\Spotlight\Providers\* -Recurse
        Remove-Item -Path HKCU:\Software\Microsoft\Office\15.0\Common\Spotlight\Content\* -Recurse
        $import = $(Start-Process "regedit.exe" -argumentlist ("/s", "$2013") -Wait -PassThru)
        if ($import.ExitCode -eq 0){
            LogWrite "Templates for Office 2013 have been successfully installed" -color yellow
        }
            else {
            LogWrite "installer exit code $($import.ExitCode)" -color red
        }
    }
# X86 OS and Office 2010
if (test-path $x86_PP_2010)
    { 
        LogWrite "32 bit office 2010 present"
        Remove-Item -Path HKCU:\Software\Microsoft\Office\14.0\Common\Spotlight\Providers\* -Recurse
        Remove-Item -Path HKCU:\Software\Microsoft\Office\15.0\Common\Spotlight\Content\* -Recurse
        $import = $(Start-Process "regedit.exe" -argumentlist ("/s", "$2010") -Wait -PassThru)
        if ($import.ExitCode -eq 0){
            LogWrite "Templates for Office 2010 have been successfully installed" -color yellow
        }
            else {
            LogWrite "installer exit code $($import.ExitCode)" -color red
        }
    }

This script creates logs in C:\ProgramData\InstallLogs
and copies templates, images and XML to C:\ProgramData\FICO Templates

Removing password protected SEP unattended during a task sequence.

2016-01-30T23:26:00.000-08:00

A while ago i was trying to create a task sequence to upgrade windows to windows 10 for a bunch of our PCs. While deploying i ran into issues with the Symantec Endpoint protection's PTP feature interrupting the upgrade. Removing SEP silently within a task sequence without disabling tamper protection and\or the password is a pain so i decided to use cleanwipe unfortunately cleanwipe no longer has the -silent parameter to uninstall SEP unattended so i got creative and decided to use sendkeys to script the clicks on cleanwipe:

Create a package in sccm with the extracted cleanwipe files and ServiceUI.exe (from the MDT toolkit) and the below script:

$PSScriptRoot = ($MyInvocation.MyCommand.Path | Split-Path | Resolve-Path).ProviderPath
$BuildName = $PSScriptRoot | Split-Path -Leaf

#Start-Process -FilePath msiexec.exe -ArgumentList $arguments -Wait -PassThru
$process = Start-Process -filepath $PSScriptRoot\CleanWipe.exe

add-type -AssemblyName microsoft.VisualBasic
add-type -AssemblyName System.Windows.Forms

$app = get-process | where {$_.mainwindowtitle -like "Cleanwipe"}
$processID = 0
foreach ($a in $app) {

        if ($a.id -gt $processID)
         {
        $processID = $a.id
    }

}

start-sleep -Milliseconds 500

[Microsoft.VisualBasic.Interaction]::AppActivate($processID)
[System.Windows.Forms.SendKeys]::SendWait("{ENTER}")
[System.Windows.Forms.SendKeys]::SendWait(" ")
[System.Windows.Forms.SendKeys]::SendWait("{ENTER}")
[System.Windows.Forms.SendKeys]::SendWait(" ")
[System.Windows.Forms.SendKeys]::SendWait("{TAB}")
[System.Windows.Forms.SendKeys]::SendWait("{TAB}")
[System.Windows.Forms.SendKeys]::SendWait("{TAB}")
[System.Windows.Forms.SendKeys]::SendWait("{TAB}")
[System.Windows.Forms.SendKeys]::SendWait("{ENTER}")
[System.Windows.Forms.SendKeys]::SendWait(" ")
[System.Windows.Forms.SendKeys]::SendWait("{TAB}")
[System.Windows.Forms.SendKeys]::SendWait("{TAB}")
[System.Windows.Forms.SendKeys]::SendWait("{TAB}")
[System.Windows.Forms.SendKeys]::SendWait("{TAB}")
[System.Windows.Forms.SendKeys]::SendWait("{ENTER}")

Create a task sequence and use the below command line to run the script in user session instead of 'in a system' context:

Powershell - Get specified user's SID and local home directory.

2015-08-11T02:47:00.005-07:00

Get specified user's SID and local home directory.

# Get current user's samaccountname only (without the domain prefix) by checking the username on console instead of the account #running the powershell commands.

$explorerInstance = Get-WmiObject -Class Win32_Process | Where-Object -Property name -EQ -Value ‘explorer.exe’
$ownerinfo = $explorerInstance.GetOwner()
$username = $ownerinfo.User
$domaininfo = $ownerinfo.Domain
 
 
$user = New-Object System.Security.Principal.NTAccount("$domaininfo", "$username")
$sid = $user.Translate([System.Security.Principal.SecurityIdentifier])
$userprofile = Get-WmiObject -Namespace root/cimv2 -Class win32_userprofile -Filter "SID='$($sid.value)'"
$USER_HOME = $userprofile.localpath

Add mobile user using self service on 10.10.3

2015-06-07T05:31:00.001-07:00

This is an updated script that also detects NFSHomeDirectory attribute if it exists for a given user and creates it for createmobileaccount to work on 10.10.3

#!/bin/sh

# Tausif - 07/06/2015 Added fix for OS X 10.1.3 mobile directory creation


IFS=$'\n'


# Logging Variables and Functions


logFile=/private/var/log/"$(basename "$0")".log


# Status messages are green, and logged.

function msg_status() {

    echo $(date "+%Y-%m-%d %H:%M:%S INFO: ") $1 | tee -a $logFile &amp;&gt; /dev/null

}


# Error messages are red, and logged.

function msg_error() {

    echo $(date "+%Y-%m-%d %H:%M:%S ERROR: ") $1 | tee -a $logFile &amp;&gt; /dev/null

}


function LogPrimer() {

msg_status "Start logging to $logFile"

}


# Global Variables &amp; Functions

LogPrimer


# Make sure the script is being executed by root

if [ $(id -u) -ne 0 ]; then

    msg_error "This script must be run as root."

    exit 1

fi


SeaHorse="Yes No"

shortName=""

IDLELOOPBREAKCOUNTER=0


# Main Process #


# If the machine is not bound to AD, then there's no purpose going any further.

checkAD=`/usr/bin/dscl localhost -list . | grep "Active Directory"`

if [ "${checkAD}" != "Active Directory" ]; then

osascript -e 'tell application "System Events" to display dialog "This machine is not bound to Active Directory." &amp; "\nExiting..." with title "Domain Unavailable" buttons {"OK"} default button 1 giving up after 300 with icon 0'

msg_error "Domain Unavailable: This machine is not bound to Active Directory. Exiting..."

exit 1

else


until [ "$SeaHorse" == "Yes" ]; do


# Verify CORP ID

until [ -n "$UserName" ] &amp;&amp; [ $UserName != "username" ] &amp;&amp; [[ $shortName == $UserName ]];

do


# Loopbreak counter, to exit after 10 loops without interaction/success.

IDLELOOPBREAKCOUNTER=$[$IDLELOOPBREAKCOUNTER +1]

msg_status "Loop number $IDLELOOPBREAKCOUNTER."

if [[ $IDLELOOPBREAKCOUNTER -ge 10 ]];

then

msg_error "Looped $IDLELOOPBREAKCOUNTER times without success. Exiting..."

exit 1

fi


UserName=$(/usr/bin/osascript &lt;&lt; EOF

tell application "System Events" to display dialog "Please enter the user's CORP ID:" default answer "username" with title "Create CORP Mobile Account" buttons {"Continue", "Cancel"} default button "Continue" giving up after 300 with icon path to resource "AccountsPref.icns" in bundle "/System/Library/PreferencePanes/Accounts.prefPane/Contents/Resources"

set UserName to the text returned of result

EOF)


# Check for cancelation, or preposterous UserName

if [ $? != 0 ] ;

then

exit 0

elif [[ -z $UserName ]] || [[ $UserName == "username" ]];

then

msg_error "Username cannot be blank, or username."

/usr/bin/osascript -e 'tell application "System Events" to display dialog "Username cannot be blank, or username." with title "Error" buttons {"Ok"} default button "Ok" giving up after 300 with icon caution'

fi


# Directory Search

#dscl search scope is set to  /Active\ Directory/CORP/All\ Domains because CORP is the short name of my domain change it for your environment.


FirstName="`/usr/bin/dscl /Active\ Directory/CORP/All\ Domains -read /Users/$UserName FirstName | awk -F'FirstName:' '{print $0}' | sed 's/FirstName://g'`"

LastName="`/usr/bin/dscl /Active\ Directory/CORP/All\ Domains -read /Users/$UserName LastName | awk -F'LastName:' '{print $0}' | sed 's/LastName://g'`"

RealName=$(echo $FirstName$LastName)

shortName="`/usr/bin/dscl /Active\ Directory/CORP/All\ Domains -read /Users/$UserName RecordName | awk '{print $2}'`"

HomeDir=$(/usr/bin/dscl /Active\ Directory/CORP/All\ Domains -read /Users/$UserName NFSHomeDirectory | awk '{print $2}' | sed 's/\'/home'//' | sed 's/^.//')


# DSLocal Search

localshortName="`/usr/bin/dscl . -read /Users/$UserName RecordName | awk '{print $2}'`"


if [[ $shortName != $UserName ]];

then

msg_error "Invalid username: $UserName not found in CORP"

/usr/bin/osascript -e 'tell application "System Events" to display dialog "'$UserName' not found in CORP." with title "Invalid Username" buttons {"Ok"} default button "Ok" giving up after 300 with icon caution'

SeaHorse=No

break

fi


SeaHorse=$(/usr/bin/osascript &lt;&lt; EOF

tell application "System Events" to display dialog "Is this the correct user?\n$RealName" with title "Confirm User ID" buttons {"Yes", "No"} default button "No" giving up after 300 with icon path to resource "AccountsPref.icns" in bundle "/System/Library/PreferencePanes/Accounts.prefPane/Contents/Resources"

set SeaHorse to the button returned of result

EOF)

if [[ $SeaHorse == "No" ]];

then

msg_error "User indicated that $UserName was not correct."

UserName=""

elif [[ $SeaHorse == "Yes" ]];

then

msg_status "User indicated that $RealName was correct."

if [ `who | grep console | awk '{print $1}'` == "$shortName" ];

then

msg_error "$RealName is logged in. Please log in as a local administrator. Exiting..."

set -x verbose

/usr/bin/osascript -e 'tell application "System Events" to display dialog "'$RealName' is logged in.\nPlease log in as a local administrator." with title "Error" buttons {"Ok"} default button "Ok" giving up after 300 with icon caution'

exit 1

elif [[ $shortName == $localshortName ]];

then

msg_error "$RealName already exists in dslocal. Exiting..."

/usr/bin/osascript -e 'tell application "System Events" to display dialog "'$RealName' already exists in dslocal." with title "Error" buttons {"Ok"} default button "Ok" giving up after 300 with icon caution'

exit 1

fi

if [[ -z $HomeDir ]];

then

msg_error "unable to retrieve NFSHomeDirectory.."

cp -R /System/Library/User\ Template/English.lproj /Users/$UserName

chown -R $UserName /Users/$UserName

else

msg_error "Creating NFSHomeDirec locally.."

cp -R /System/Library/User\ Template/English.lproj /Users/$HomeDir

chown -R $UserName /Users/$HomeDir

fi

/System/Library/CoreServices/ManagedClient.app/Contents/Resources/createmobileaccount -v -n $shortName

dscl . -append /Groups/admin GroupMembership $shortName

if [ $? == 0 ] ;

then

msg_status "Success! Created mobile administrator account for $RealName."

/usr/bin/osascript -e 'tell application "System Events" to display dialog "Created mobile administrator account." with title "Success!" buttons {"Ok"} default button "Ok" giving up after 300 with icon path to resource "AccountsPref.icns" in bundle "/System/Library/PreferencePanes/Accounts.prefPane/Contents/Resources"'

exit 0

else

msg_error "Unknown Error. Exiting..."

/usr/bin/osascript -e 'tell application "System Events" to display dialog "Unknown error. Account creation has ended." with title "Unknown Error" buttons {"Ok"} default button "Ok" giving giving up after 300 with icon caution'

exit 1

fi

fi

done

done

fi


exit 0

Sync failed: WSUS update source not found on site CA1. Please refer to WCM.log for configuration error details.. Source: getSiteUpdateSource

2014-12-30T06:11:00.002-08:00

Go To Administration workspace 00 Sites and Site Sytem Roles right click the 'Software Update Point' click properties, under Proxy and Account settings set the wsus server to use the service account (needs to be administrator)

WMI filter for GPO targeting WIndows clients with SCCM 2007 client

2014-06-21T00:49:00.006-07:00

Exactly as is says:

Adding VDI to specific OU using SetupComplete.cmd

2014-06-20T22:36:00.001-07:00

Adding VDIs to specific OUs can be accomplished by running a batch file which invokes a powershell script to do so. Create a file c:\windows\Setup\Scripts\SetupComplete.cmd and put in the content below.

***********SetupComplete.cmd*************

powershell Set-ExecutionPolicy bypass
powershell C:\Windows\Temp\JoinDomain.ps1
del C:\Windows\Temp\JoinDomain.ps1
timeout 30
shutdown -t 0 -r -f

Create another file C:\Temp\JoinDomain.ps1 with the below content:

$credential = New-Object System.Management.Automation.PsCredential -ArgumentList @("domainname\domainaccount", (ConvertTo-SecureString "password" -AsPlainText -Force))

Add-Computer -DomainName "you.domain.com" -Credential $credential -OUPath ("OU=Your,OU=OU,OU=path,DC=at,DC=your,DC=domain")

the Account used needs to have sufficient priviliges to add computers to domain.

Customising office for mac using Bash

2014-05-23T11:05:00.005-07:00

#!/bin/bash

# Post install script to customize office 14.4.1
#created by tausif for FICO

cuser=$(ls -l /dev/console | awk '{print $3}')
uhome=$(sudo dscl . -read /Users/$cuser NFSHomeDirectory | awk '{print $2}')
ugroup=$(id -g -n $cuser)

LOGF="/private/var/log/Office-Setup.log"

# Set the Office .plist paths and locations.
OFFICEPREF="$uhome/Library/Preferences/com.microsoft.office.plist"
OFFICEDOMAIN="$uhome/Library/Preferences/com.microsoft.office"

# Set the name of the Organisation
OFFICEORG="Fair Isaac Corporation"

# Auto Updates
AUPREF="$uhome/Library/Preferences/com.microsoft.autoupdate2.plist"
AUDOMAIN="$uhome/Library/Preferences/com.microsoft.autoupdate2"

# Error Reporting
ERPREF="$uhome/Library/Preferences/com.microsoft.error_reporting.plist"
ERDOMAIN="$uhome/Library/Preferences/com.microsoft.error_reporting"

# Excel
EXPREF="$uhome/Library/Preferences/com.microsoft.Excel.plist"
EXDOMAIN="$uhome/Library/Preferences/com.microsoft.Excel"

# Word
WORPREF="$uhome/Library/Preferences/com.microsoft.Word.plist"
WORDOMAIN="$uhome/Library/Preferences/com.microsoft.Word"

# PowerPoint
PPTPREF="$uhome/Library/Preferences/com.microsoft.PowerPoint.plist"
PPTDOMAIN="$uhome/Library/Preferences/com.microsoft.PowerPoint"

# Outlook
OUTPREF="$uhome/Library/Preferences/com.microsoft.Outlook.plist"
OUTDOMAIN="$uhome/Library/Preferences/com.microsoft.Outlook"

sleep 2
##################### Beginning ###############################################

echo "---------- Beginning Log ----------" >> "$LOGF"
echo "Configuring Office 2011............" >> "$LOGF"
echo `date "+%d%m%y %H.%M"` >> "$LOGF"
echo "User: $cuser" >> "$LOGF"

###############################################################################
# Remove Dock items early #
###############################################################################
i="$(defaults read $uhome/Library/Preferences/com.apple.dock.plist persistent-apps | grep _CFURLString\" | awk '/Microsoft%20Office%202011/ {print NR}')"
for j in `echo "$i" | tr " " "\n" | sort -gr`
do
/usr/libexec/PlistBuddy -c "Delete persistent-apps:$[$j-1]" $uhome/Library/Preferences/com.apple.dock.plist
done

killall -hup Dock

sleep 1

##################### Office Preferences #######################################

# Create files and values com.microsoft.office.plist
if [ -f "$OFFICEPREF" ];then
echo "com.microsoft.office.plist exists." >> "$LOGF"
else
echo "com.microsoft.office.plist does not exist. Creating it and setting SetupComplete to 1" >> $LOGF
defaults write "$OFFICEDOMAIN" "14\\FirstRun\\SetupComplete" -int 1
defaults write "$OFFICEDOMAIN" "14\\File New State\\FNXCEL" -int 0
defaults write "$OFFICEDOMAIN" "14\\File New State\\FNPPT3" -int 0
defaults write "$OFFICEDOMAIN" "14\\File New State\FNMSWD" -int 0
chown -R "$cuser":"$ugroup" "$OFFICEPREF"
chmod -f 777 "$OFFICEPREF"
fi

echo "Checking if 14\\FirstRun\\SetupComplete has value 1" >> "$LOGF"
SETUPSTATUS=$(defaults read "$OFFICEDOMAIN" "14\\FirstRun\\SetupComplete")
if [ $SETUPSTATUS = 1 ];then
echo "SetupComplete is set to 1. Nothing to do" >> "$LOGF"
else
echo "Setting SetupComplete to 1" >> "$LOGF"
defaults write "$OFFICEDOMAIN" "14\\FirstRun\\SetupComplete" -int 1
defaults write "$OFFICEDOMAIN" "14\\File New State\FNXCEL" -int 0
defaults write "$OFFICEDOMAIN" "14\\File New State\FNPPT3" -int 0
defaults write "$OFFICEDOMAIN" "14\\File New State\FNMSWD" -int 0
chown -R "$cuser":"$ugroup" "$OFFICEPREF"
chmod -f 777 "$OFFICEPREF"
fi

##################### Excel Preferences ######################################

# Disable Excel Welcome Screen
if [ -f "$EXPREF" ];then
echo "com.microsoft.Excel.plist exists." >> "$LOGF"
else
echo "com.microsoft.Excel.plist does not exist. Creating it and setting SetupComplete to 1" >> "$LOGF"
defaults write "$EXDOMAIN" "14\\Microsoft Excel\\Hide Welcome Window" -int 1
chown -R "$cuser":"$ugroup" "$EXPREF"
chmod -f 777 "$EXPREF"
fi

SETUPEXCELSTATUS=$(defaults read "$EXDOMAIN" "14\\Microsoft Excel\\Hide Welcome Window")
if [ $SETUPEXCELSTATUS = 1 ]
then
echo "Excel Welcome Window is set to 1. Nothing to do" >> "$LOGF"
else
echo "Setting Hide Welcome Window to 1" >> "$LOGF"
defaults write "$EXDOMAIN" "14\\Microsoft Excel\\Hide Welcome Window" -int 1
chown -R "$cuser":"$ugroup" "$EXPREF"
chmod -f 777 "$EXPREF"
fi

##################### Word Preferences ######################################

# Disable Word Welcome Screen
if [ -f "$WORPREF" ];then
echo "com.microsoft.Word.plist exists." >> "$LOGF"
else
echo "com.microsoft.Word.plist does not exist. Creating it and setting SetupComplete to 1" >> "$LOGF"
defaults write "$WORDOMAIN" "14\\Options\\Hide Welcome Dialog" -int 1
defaults write "$WORDOMAIN" "14\\Options\\Options:StartWhatIsNew" - int 1
chown -R "$cuser":"$ugroup" "$WORDPREF"
chmod -f 777 "$WORPREF"
fi

SETUPWORDSTATUS=$(defaults read "$WORDOMAIN" "14\\Options\\Hide Welcome Dialog")
if [ $SETUPWORDSTATUS = 1 ]
then
echo "Word Welcome Window is set to 1. Nothing to do" >> "$LOGF"
else
echo "Setting Hide Welcome Window to 1" >> "$LOGF"
defaults write "$WODOMAIN" "14\\Options\\Hide Welcome Dialog" -int 1
defaults write "$WORDOMAIN" "14\\Options\\Options:StartWhatIsNew" - int 1
chown -R "$cuser":"$ugroup" "$WORDPREF"
chmod -f 777 "$WORPREF"
fi

##################### PowerPoint Preferences ######################################

# Disable PowerPoint Welcome Screen
if [ -f "$PPTPREF" ]; then
echo "com.microsoft.PowerPoint.plist exists." >> "$LOGF"
else
echo "com.microsoft.PowerPoint.plist does not exist. Creating it and setting SetupComplete to 1" >> "$LOGF"
defaults write "$PPTDOMAIN" "14\\Options\\Options\\Hide Welcome Dialog" -int 1
chown -R "$cuser":"$ugroup" "$PPTPREF"
chmod -f 777 "$PPTPREF"
fi

SETUPPPTSTATUS=$(defaults read "$PPTDOMAIN" "14\\Options\\Options\\Hide Welcome Dialog")
if [ $SETUPPPTSTATUS = 1 ]
then
echo "PowerPoint Welcome Window is set to 1. Nothing to do" >> "$LOGF"
else
echo "Setting Hide Welcome Window to 1" >> "$LOGF"
defaults write "$PPTDOMAIN" "14\\Options\\Options\\Hide Welcome Dialog" -int 1
chown -R "$cuser":"$ugroup" "$PPTPREF"
chmod -f 777 "$PPTPREF"
fi

##################### Outlook Preferences ######################################

# Disable Outlook Welcome Screen
if [ -f "$OUTPREF" ];then
echo "com.microsoft.Outlook.plist exists." >> "$LOGF"
else
echo "com.microsoft.Outlook.plist does not exist. Creating it and setting SetupComplete to 1" >> "$LOGF"
defaults write "$OUTDOMAIN" "FirstRunExperienceCompleted" -int 1
chown -R "$cuser":"$ugroup" "$OUTPREF"
chmod -f 777 "$OUTPREF"
fi
SETUPOUTSTATUS=$(defaults read "$OUTDOMAIN" "FirstRunExperienceCompleted")
if [ $SETUPOUTSTATUS = 1 ]; then
echo "Outlook Welcome Window is set to 1. Nothing to do" >> "$LOGF"
else
echo "Setting Hide Welcome Window to 1" >> "$LOGF"
defaults write "$OUTDOMAIN" "FirstRunExperienceCompleted" -int 1
chown -R "$cuser":"$ugroup" "$OUTPREF"
chmod -f 777 "$OUTPREF"
fi

##################### Update Preferences ######################################

# Create fields and values com.microsoft.autoupdate2.plist
if [ -f "$AUPREF" ];then
echo "com.microsoft.autoupdate2.plist exists." >> "$LOGF"
else
echo "com.microsoft.autoupdate2.plist does not exist. Creating it and setting HowToCheck and LastUpdate to Manual" >> "$LOGF"
defaults write "$AUDOMAIN" "HowToCheck" -string "Manual" >> "$LOGF"
defaults write "$AUDOMAIN" "LastUpdate" -date "2001-01-01T00:00:00Z" >> "$LOGF"
chown -R "$cuser":"$ugroup" "$AUPREF"
chmod -f 777 "$AUPREF"
fi
echo "Checking if HowToCheck has value Manual" >> "$LOGF"
HOWTOCHECK=$(defaults read "$AUDOMAIN" "HowToCheck")
LASTUPDATE=$(defaults read "$AUDOMAIN" "LastUpdate")
if [ $HOWTOCHECK = "Automatic" ]
then
echo "HowToCheck is set to Automatic. Nothing to do" >> "$LOGF"
else
echo "Setting HowToCheck to Automatic" >> "$LOGF"
defaults write "$AUDOMAIN" "HowToCheck" -string "Automatic"
chown -R "$cuser":"$ugroup" "$AUPREF"
chmod -f 777 "$AUPREF"
fi
if [ -z "$LASTUPDATE" ];then
echo "LastUpdate is empty, populating"
defaults write "$AUDOMAIN" "LastUpdate" -date "2001-01-01T00:00:00Z"
chown -R "$cuser":"$ugroup" "$AUPREF"
chmod -f 777 "$AUPREF"
else
echo "LastUpdate exists" >> "$LOGF"
fi

##################### Error Reporting Preferences ######################################

# Create fields and values com.microsoft.error_reporting.plist
if [ -f "$ERPREF" ];then
echo "com.microsoft.error_reporting.plist exists." >> "$LOGF"
else
echo "com.microsoft.error_reporting.plist does not exist. Creating it and setting SQMReportsEnabled and ShipAssertEnabled to False" >> "$LOGF"
defaults write "$ERDOMAIN" "SQMReportsEnabled" -bool False
defaults write "$ERDOMAIN" "ShipAssertEnabled" -bool False
chown -R "$cuser":"$ugroup" "$ERPREF"
chmod -f 777 "$ERPREF"
fi
echo "Checking if SQMReportsEnabled has value False" >> "$LOGF"
SQMREPORTS=$(defaults read "$ERDOMAIN" "SQMReportsEnabled")
SHIPASSERT=$(defaults read "$ERDOMAIN" "ShipAssertEnabled")
if [ $SQMREPORTS = "0" ]
then
echo "SQMReportsEnabled is set to False. Nothing to do" >> "$LOGF"
else
echo "Setting SQMReportsEnabled to False" >> "$LOGF"
defaults write "$ERDOMAIN" "SQMReportsEnabled" -bool False
chown -R "$cuser":"$ugroup" "$ERPREF"
chmod -f 777 "$ERPREF"
fi
if [ $SHIPASSERT = "0" ]
then
echo "ShipAssertEnabled is set to False. Nothing to do" >> "$LOGF"
else
echo "Setting ShipAssertEnabled to False" >> "$LOGF"
defaults write "$ERDOMAIN" "ShipAssertEnabled" -bool False
chown -R "$cuser":"$ugroup" "$ERPREF"
chmod -f 777 "$ERPREF"
fi

##################### UserInfo Preferences ######################################

# Set name
REALNAME=$(dscl . -read /Users/$cuser RealName | grep -v RealName | sed 's/^[ ]*//')
echo "Setting realname" >> "$LOGF"
defaults write "$OFFICEDOMAIN" "14\\UserInfo\\UserName" -string "$REALNAME"
defaults write "$OFFICEDOMAIN" "14\\UserInfo\\UserOrganization" -string "$OFFICEORG"
chown -R "$cuser":"$ugroup" "$OFFICEPREF"
chmod -f 777 "$OFFICEPREF"

##################### Ending Preferences ######################################

echo -e "---------- Ending Log ----------\n" >> "$LOGF"

sudo -u $cuser defaults write $uhome/Library/Preferences/com.apple.dock.plist persistent-apps -array-add "tile-datafile-data_CFURLString/Applications/Microsoft Office 2011/Microsoft Word.app_CFURLStringType0"
sudo -u $cuser defaults write $uhome/Library/Preferences/com.apple.dock.plist persistent-apps -array-add "tile-datafile-data_CFURLString/Applications/Microsoft Office 2011/Microsoft Excel.app_CFURLStringType0"
sudo -u $cuser defaults write $uhome/Library/Preferences/com.apple.dock.plist persistent-apps -array-add "tile-datafile-data_CFURLString/Applications/Microsoft Office 2011/Microsoft PowerPoint.app_CFURLStringType0"
sudo -u $cuser defaults write $uhome/Library/Preferences/com.apple.dock.plist persistent-apps -array-add "tile-datafile-data_CFURLString/Applications/Microsoft Office 2011/Microsoft Outlook.app_CFURLStringType0"

sleep 3

chown "$cuser":"$ugroup" $HOME/Library/Preferences/com.apple.dock.plist
chmod 600 $HOME/Library/Preferences/com.apple.dock.plist

sudo jamf policy -trigger 2014OfficeTemplates -verbose >> "$LOGF"

sudo rm -f /usr/sbin/dockutil

killall cfprefsd
killall -hup Dock

exit 0

Office for mac removal script.

2014-05-19T03:06:00.004-07:00

#!/bin/sh
## postflight
## Office for mac removal script by tausif

###############################################################################
# Set variables #
###############################################################################
HOME=$(sudo dscl . -read /Users/$USERNAME NFSHomeDirectory | awk '{print $2}')
#get actual home directory on mac
person=$( ls -l /dev/console | awk '{print $3}' )
#get logged in user
sudo touch "/private/var/log/office_install.log"
logFile="/private/var/log/office_install.log"
log () {
echo $1
echo $(date "+%Y-%m-%d %H:%M:%S: ") $1 >> $logFile
}

if ! (which -s dockutil && dockutil --version | grep -q '^1.1.4$';); then
cd /usr/sbin
sudo curl -O https://raw.githubusercontent.com/kcrawford/dockutil/ef55cb4cf94659074d4a4ea915e76fefbf322545/scripts/dockutil
#check for dockutil v 1.1.4 and if not there download it

sudo chmod +x /usr/sbin/dockutil
fi

###############################################################################
# Remove Dock items early #
###############################################################################
/usr/sbin/dockutil --remove 'Microsoft Word' --allhomes
/usr/sbin/dockutil --remove 'Microsoft Excel' --allhomes
/usr/sbin/dockutil --remove 'Microsoft Outlook' --allhomes
/usr/sbin/dockutil --remove 'Microsoft PowerPoint' --allhomes
/usr/sbin/dockutil --remove 'Microsoft Document Connection' --allhomes

log "removed from dock"
# Install receipts assingment
OFFICERECEIPTS=$(pkgutil --pkgs=com.microsoft.office*)
osascript -e 'tell application "Microsoft Database Daemon" to quit'
log "Kill Microsoft Database Daemon"

sudo rm -rf '/Applications/Microsoft Communicator.app/'
sudo rm -rf '/Applications/Microsoft Messenger.app/'
sudo rm -rf '/Applications/Microsoft Office 2011/'
sudo rm -rf '/Applications/Remote Desktop Connection.app/'
log "Remove apps"

sudo rm -rf '/Library/Application Support/Microsoft/'
sudo rm -rf '/Library/Automator/*Excel*'
sudo rm -rf '/Library/Automator/*Office*'
sudo rm -rf '/Library/Automator/*Outlook*'
sudo rm -rf '/Library/Automator/*PowerPoint*'
sudo rm -rf '/Library/Automator/*Word*'
sudo rm -rf '/Library/Automator/Add New Sheet to Workbooks.action'
sudo rm -rf '/Library/Automator/Create List from Data in Workbook.action'
sudo rm -rf '/Library/Automator/Create Table from Data in Workbook.action'
sudo rm -rf '/Library/Automator/Get Parent Presentations of Slides.action'
sudo rm -rf '/Library/Automator/Get Parent Workbooks.action'
sudo rm -rf '/Library/Automator/Set Document Settings.action'
sudo rm -rf '/Library/Fonts/Microsoft/'
sudo rm -rf '/Library/Internet Plug-Ins/*SharePoint*'
sudo rm -rf '/Library/LaunchDaemons/*Microsoft*'
sudo rm -rf '/Library/Preferences/*Microsoft*'
sudo rm -rf '/Library/PrivilegedHelperTools/*Microsoft*'
sudo rm -rf '$HOME/Library/Application Support/Microsoft/'
sudo rm -rf '$HOME/Library/Preferences/com.microsoft.*'

log "remove library items"

# Forget Install Receipts

for ARECEIPT in $OFFICERECEIPTS
do
pkgutil --forget $ARECEIPT
done

log "forgot receipts"
killall Dock
echo "All done, MS Office removed."
exit 0

Setting firefox preferences in macs for Oracle SSO to work.

2014-05-09T11:13:00.000-07:00

#!/bin/bash
#Written by Tausif for FICO
#RESULT!
bloke=$(ls -l /dev/console | awk '{print $3}' )
place=$(sudo dscl . -read /Users/$bloke NFSHomeDirectory | awk '{print $2}')
logFile="/private/var/log/ff-mod.log"
log () {
echo $1
echo $(date "+%Y-%m-%d %H:%M:%S: ") $1 >> $logFile
}

set(){

if grep 'network.negotiate-auth.trusted-uris' /Applications/Firefox.app/Contents/MacOS/defaults/pref/channel-prefs.js;
then
sudo sed '/network.negotiate-auth.trusted-uris/d' /Applications/Firefox.app/Contents/MacOS/defaults/pref/channel-prefs.js > /Applications/Firefox.app/Contents/MacOS/defaults/pref/channel-prefs.js.e;
echo 'user_pref("network.negotiate-auth.trusted-uris", "http://,https://");' >> /Applications/Firefox.app/Contents/MacOS/defaults/pref/channel-prefs.js.e;
mv /Applications/Firefox.app/Contents/MacOS/defaults/pref/channel-prefs.js.e /Applications/Firefox.app/Contents/MacOS/defaults/pref/channel-prefs.js
log "USER $bloke: network.negotiate-auth.trusted-uris is now set to http using SED";
else
echo 'user_pref("network.negotiate-auth.trusted-uris", "http://,https://");' >> /Applications/Firefox.app/Contents/MacOS/defaults/pref/channel-prefs.js;
     log "USER $bloke: network.negotiate-auth.trusted-uris is now set to http";

fi
if grep 'network.negotiate-auth.gsslib' /Applications/Firefox.app/Contents/MacOS/defaults/pref/channel-prefs.js;
then
sudo sed '/network.negotiate-auth.gsslib/d' /Applications/Firefox.app/Contents/MacOS/defaults/pref/channel-prefs.js > /Applications/Firefox.app/Contents/MacOS/defaults/pref/channel-prefs.js.e;
echo 'user_pref("network.negotiate-auth.gsslib", "1");' >> /Applications/Firefox.app/Contents/MacOS/defaults/pref/channel-prefs.js.e;
mv /Applications/Firefox.app/Contents/MacOS/defaults/pref/channel-prefs.js.e /Applications/Firefox.app/Contents/MacOS/defaults/pref/channel-prefs.js
log "USER $bloke: network.negotiate-auth.gsslib is now set to 1 using SED";
else
echo 'user_pref("network.negotiate-auth.gsslib", "1");' >> /Applications/Firefox.app/Contents/MacOS/defaults/pref/channel-prefs.js;
     log "USER $bloke: network.negotiate-auth.gsslib is now set to 1";

fi
if grep 'network.negotiate-auth.delegation-uris' /Applications/Firefox.app/Contents/MacOS/defaults/pref/channel-prefs.js;
then
sudo sed '/network.negotiate-auth.delegation-uris/d' /Applications/Firefox.app/Contents/MacOS/defaults/pref/channel-prefs.js > /Applications/Firefox.app/Contents/MacOS/defaults/pref/channel-prefs.js.e;
echo 'user_pref("network.negotiate-auth.delegation-uris", "http://,https://");' >> /Applications/Firefox.app/Contents/MacOS/defaults/pref/channel-prefs.js.e;
mv /Applications/Firefox.app/Contents/MacOS/defaults/pref/channel-prefs.js.e /Applications/Firefox.app/Contents/MacOS/defaults/pref/channel-prefs.js
log "USER $bloke: network.negotiate-auth.delegation-uris is now set to http using SED";
else
echo 'user_pref("network.negotiate-auth.delegation-uris", "http://,https://");' >> /Applications/Firefox.app/Contents/MacOS/defaults/pref/channel-prefs.js;
    log "USER $bloke: network.negotiate-auth.delegation-uris is now set to http";

fi
}

pset(){
bloke=$(ls -l /dev/console | awk '{print $3}' )
place=$(sudo dscl . -read /Users/$bloke NFSHomeDirectory | awk '{print $2}')
#Get an array of all users
declare -a userarray
userarray=$(sudo /usr/bin/dscl . list /Users UniqueID | awk '$2 >= 500 && $2 < 100000000000000000 { print $1; }')
#Iterate through the array of all users
for i in ${userarray[@]};
do
if [ -d $place/Library/Application\ Support/Firefox/Profiles ];
then
#Get an array of all profiles under this User for Firefox
declare -a parray
parray=( `ls $place/Library/Application\ Support/Firefox/Profiles | grep -v DS_Store` )
for p in ${parray[@]};
do
if grep 'network.negotiate-auth.trusted-uris' $place/Library/Application\ Support/Firefox/Profiles/$p/prefs.js;
then
sudo sed '/network.negotiate-auth.trusted-uris/d' $place/Library/Application\ Support/Firefox/Profiles/$p/prefs.js > $place/Library/Application\ Support/Firefox/Profiles/$p/prefs.js.e;
echo 'user_pref("network.negotiate-auth.trusted-uris", "http://,https://");' >> $place/Library/Application\ Support/Firefox/Profiles/$p/prefs.js.e;
mv $place/Library/Application\ Support/Firefox/Profiles/$p/prefs.js.e $place/Library/Application\ Support/Firefox/Profiles/$p/prefs.js;
log "USER $bloke: network.negotiate-auth.trusted-uris is now set to http using SED";
else
echo 'user_pref("network.negotiate-auth.trusted-uris", "http://,https://");' >> $place/Library/Application\ Support/Firefox/Profiles/$p/prefs.js;
log "USER $bloke: network.negotiate-auth.trusted-uris is now set to http";
fi
if grep 'network.negotiate-auth.gsslib' $place/Library/Application\ Support/Firefox/Profiles/$p/prefs.js;
then
sudo sed '/network.negotiate-auth.gsslib/d' $place/Library/Application\ Support/Firefox/Profiles/$p/prefs.js > $place/Library/Application\ Support/Firefox/Profiles/$p/prefs.js.e;
echo 'user_pref("network.negotiate-auth.gsslib", "1");' >> $place/Library/Application\ Support/Firefox/Profiles/$p/prefs.js.e;
mv $place/Library/Application\ Support/Firefox/Profiles/$p/prefs.js.e $place/Library/Application\ Support/Firefox/Profiles/$p/prefs.js;
log "USER $bloke: network.negotiate-auth.gsslib is now set to 1 using SED";
else
echo 'user_pref("network.negotiate-auth.gsslib", "1");' >> $place/Library/Application\ Support/Firefox/Profiles/$p/prefs.js;
log "USER $bloke: network.negotiate-auth.gsslib is now set to 1";
fi
if grep 'network.negotiate-auth.delegation-uris' $place/Library/Application\ Support/Firefox/Profiles/$p/prefs.js;
then
sudo sed '/network.negotiate-auth.delegation-uris/d' $place/Library/Application\ Support/Firefox/Profiles/$p/prefs.js > $place/Library/Application\ Support/Firefox/Profiles/$p/prefs.js.e;
echo 'user_pref("network.negotiate-auth.delegation-uris", "http://,https://");' >> $place/Library/Application\ Support/Firefox/Profiles/$p/prefs.js.e;
mv $place/Library/Application\ Support/Firefox/Profiles/$p/prefs.js.e $place/Library/Application\ Support/Firefox/Profiles/$p/prefs.js;
log "USER $bloke: network.negotiate-auth.delegation-uris is now set to http using SED";
else
echo 'user_pref("network.negotiate-auth.delegation-uris", "http://,https://");' >> $place/Library/Application\ Support/Firefox/Profiles/$p/prefs.js;
log "USER $bloke: network.negotiate-auth.delegation-uris is now set to http";
fi
done
fi
done

}

killFirefox(){

#LoginWindowPID=`pgrep firefox`; This command only works with 10.8 machines
ps -ax | grep -i "Firefox.app" | grep -v grep
if [ $? == 0 ];
then
firefoxPID=`ps -ax | grep -i firefox | head -1 | cut -d "?" -f1 | sed 's/^[ \t]*//;s/[ \t]*$//'`;
kill -9 $firefoxPID
log "Killing Firefox"
fi

}

killFirefox;
set;
pset;

exit 0;

Download and install Lync for mac 14.0.8 using bash script.

2014-04-22T23:41:00.001-07:00

#!/bin/bash
#Download and install Lync for mac 14.0.8 using bash

USERNAME=$(ls -l /dev/console | awk '{print $3}' )
#get current username of AD user
HOME=$(sudo dscl . -read /Users/$USERNAME NFSHomeDirectory | awk '{print $2}')
#get user's home directory
MobileUsers=`dscl . read /Users/$USERNAME OriginalNodeName | grep "Active Directory"`
#do only for AD users
dmg="lync_14.0.8_140321.dmg"
give the current folder name
logfile="/private/var/log/Lyncwebupgrade.log"
log () {
echo $1
echo $(date "+%Y-%m-%d %H:%M:%S: ") $1 >> $logFile
}
#logging function
receipt='/private/var/db/receipts/com.microsoft.lync.all.lync.pkg.14.0.8.plist'
if [ -f "$receipt" ]
then
log "lync reciept found aborting"
exit 0
else
check=$(osascript -e 'tell application "System Events" to display dialog "Your Lync is out of date, please click OK to upgrade Lync" with title "Lync Sign in Details" with icon note buttons {"OK","Do Later"} default button 1')

if [[ $check =~ OK ]];
then
#kill lync if open
LYNC_PID=$(ps ax | grep "/Applications/Microsoft Lync.app/Contents/MacOS/Microsoft Lync" | grep -v grep | awk '{ print $1 }')
kill -9 ${LYNC_PID}
if [ $? = 0 ] ; then
log "Lync is open killing it now "
else
log "Lync is not running"
fi
for username in $MobileUsers
do
#this is in case user had pervious version of Lync
rm -rf $HOME/Documents/Microsoft\ User\ Data/Microsoft\ Lync\ Data/sip_*
done
log "Removed SIP dir"
if [ -f "$dmg" ];
then
#attach the dmg if its already on current folder
hdiutil attach "$dmg" -nobrowse -noverify -noautoopen
else
#dl the lync dmg
curl -O http://download.microsoft.com/download/5/0/0/500C7E1F-3235-47D4-BC11-95A71A1BA3ED/lync_14.0.8_140321.dmg
hdiutil attach "$dmg" -nobrowse -noverify -noautoopen
fi
/usr/sbin/installer -dumplog -verbose -pkg /Volumes/Microsoft\ Lync/Lync\ Installer.pkg -target / &>/private/var/log/Lyncwebupgrade.log
#install it silently
sleep 3
/usr/bin/hdiutil detach "/Volumes/Microsoft Lync"
sleep 3
rm -f lync_14.0.8_140321.dmg
#remove the dmg
#add lync icon to dock, again only for AD users
for username in $MobileUsers
do
defaults write $HOME/Library/Preferences/com.apple.dock.plist persistent-apps -array-add "tile-datafile-data_CFURLString/Applications/VMware Fusion.app/_CFURLStringType0"
log "Lync icon added to dock"
done
sleep 5

chown $USERNAME:"CORP\Domain Users" $HOME/Library/Preferences/com.apple.dock.plist
chmod 600 $HOME/Library/Preferences/com.apple.dock.plist
log "perms changed on dock plist"

killall -HUP cfprefsd
killall -HUP Dock
sleep 3
log "bounced dock"

else
log "user declined"
exit 0

fi
fi
exit 0

Createmobileaccount and add to admin using bash script.

2014-04-21T18:51:00.002-07:00

         I got a request to simplify the process of addition of mobile accounts to macs from our local techs. Their primary complaint was that the script we used currently to create mobile accounts from AD creadentials was terminal based and hence confusing. Our local network is waay too slow for network users to just login, hence the necessity of adding mobile accounts. I created a bash script with interactive dialogs which would run as a policy in JAMF Self Service. All the tech would need to do is run the policy and enter the AD username for which the mac was to be configured.
   As usual free to use as long as i'm credited.

#!/bin/sh
#createmobileuser.sh interactive app to create mobile accounts by checking AD.
#created by tausif
checkAD=`/usr/bin/dscl localhost -list . | grep "Active Directory"`
if [ "${checkAD}" != "Active Directory" ]; then
          osascript -e 'tell application "System Events" to display dialog "A This machine is not bound to Active Directory" & "\nExiting" with title "Not on CORP Domain" buttons {"OK"} default button 1 giving up after 300 with icon 0'
exit 1
else

activeDirectoryPrompt=$(/usr/bin/osascript << EOF
tell application "System Events" to display dialog "Please the user's Active Directory login ID:" default answer "CORP ID..." with title "Mobile account created" buttons {"Continue"} default button "Continue" giving up after 300 with icon note
set activeDirectoryPrompt to the text returned of result
EOF)
FirstName="`/usr/bin/dscl /Search -read /Users/$activeDirectoryPrompt FirstName | awk '{ print $2 }'`"
LastName="`/usr/bin/dscl /Search -read /Users/$activeDirectoryPrompt LastName | awk '{ print $2 }'`"
RealName="$FirstName $LastName"
confirm=$(osascript -e 'tell application "System Events" to display dialog " Is the user named: '$FirstName' '$LastName' ?" with title "Please Click Yes or no" buttons {"Yes", "No"} default button "Yes" giving up after 300 with icon path to resource "AccountsPref.icns" in bundle "/System/Library/PreferencePanes/Accounts.prefPane/Contents/Resources"')
if [[ $confirm =~ Yes ]];
then
#create mobile account and log all messages, this is necessary as the command spews some weird messages.
/System/Library/CoreServices/ManagedClient.app/Contents/Resources/createmobileaccount -v -n $activeDirectoryPrompt &>/private/var/log/mobacc.log
dscl . -append /Groups/admin GroupMembership $activeDirectoryPrompt
osascript -e 'tell application "System Events" to display dialog "Account created." with title "Account created." buttons {"Ok"} default button "Ok" giving up after 300 with icon path to resource "AccountsPref.icns" in bundle "/System/Library/PreferencePanes/Accounts.prefPane/Contents/Resources"'
exit 0
else
osascript -e 'tell application "System Events" to display dialog "Incorrect username. Account creation has ended." with title "Incorrect Username" buttons {"Ok"} default button "Ok" giving up after 300 with icon path to resource "AccountsPref.icns" in bundle "/System/Library/PreferencePanes/Accounts.prefPane/Contents/Resources"'
fi
fi
exit 0

Set multiple NTP servers for macs using shell script

2014-04-19T22:53:00.004-07:00

Script to set multiple NTP servers on macs.

#this script sets multiple NTP servers on a mac, with the first choice to the internal NTP server
#Script to set multiple NTP servers and also enable time zone
#Created by Tausif Ahmed Khan
#!/bin/sh
TimeServer1="yourinternal.ntp.server"
TimeServer2="time.apple.com"

/usr/sbin/systemsetup -setusingnetworktime off
#Set specific time server
/usr/sbin/systemsetup -setnetworktimeserver $TimeServer1
echo "server $TimeServer2" >> /etc/ntp.conf

# enable location services
/bin/launchctl unload /System/Library/LaunchDaemons/com.apple.locationd.plist
uuid=`/usr/sbin/system_profiler SPHardwareDataType | grep "Hardware UUID" | cut -c22-57`
/usr/bin/defaults write /var/db/locationd/Library/Preferences/ByHost/com.apple.locationd.$uuid LocationServicesEnabled -int 1
/usr/sbin/chown -R _locationd:_locationd /var/db/locationd
/bin/launchctl load /System/Library/LaunchDaemons/com.apple.locationd.plist

# set time zone automatically using current location
/usr/bin/defaults write /Library/Preferences/com.apple.timezone.auto Active -bool true

/usr/sbin/systemsetup -setusingnetworktime on

/usr/sbin/systemsetup -gettimezone
/usr/sbin/systemsetup -getnetworktimeserver

exit 0

AD password expiration script for macs (launchd item)

2014-04-19T22:26:00.005-07:00

      We have been having issues with people forgetting to change their AD passwords on macs because there is no alert mechanism which lets users know that their password might expire soon.
I created a password expiration alert script to remediate this. I wanted the alert to be persistent and hence created a launchd item, which runs the script every 4 hours.
In my setup, i've put the script in /Library/passchange.sh , and a launchagent in
/Library/LaunchAgents/
You'll need to make sure the script is executable and the launchagent (owned by root:wheel) is not.
TO do this, i created an installer which places both items on the client macs and runs a postflight script to adjust the permissions and load the launchAgent.
I used Composer to package the install, you can use packages or iceberg.

As usual, free to use as long as you credit me.
passchange.sh
####################################################
#!/bin/bash
#pass word alert script created by tausif to alert people to change their passwords.
# PasswordChange.sh
ASROOT=${ASROOT:-sudo}

log () {
echo $1
echo $(date "+%Y-%m-%d %H:%M:%S: ") $1
}
logFile="/private/var/log/passwdchg.log"
# Variables and Functions #
PwdPolicy=90

OSVersion=`sw_vers | grep ProductVersion | cut -c 17-20`
ADcheck=`dscl localhost -list . | grep "Active Directory"`
Domain=`$ASROOT dsconfigad -show | grep "Active Directory Domain" | awk '{print $5}'`
LoggedInUser=`ls -l /dev/console | awk '{print $3}'`
LoggedInUID=`dscl . read /Users/$LoggedInUser UniqueID | awk '{print $2}'`

NetworkLocation=$(
ping -c 2 "corp.fairisaac.com" > /dev/null
if [ $? -eq 0 ]; then
log "Connected to FICO internal network.Checking password expiration";
else
log "Error: Not connected to FICO internal network."
fi
fi
)
if [[ $ADcheck == "Active Directory" && $Domain == "corp.fairisaac.com" && $LoggedInUID -ge 1025 ]]; then
SetDate=`dscl /Active\ Directory/CORP/All\ Domains/ read /Users//$LoggedInUser pwdLastSet | awk '/pwdLastSet:/{print $2}'`
LastSet=`expr $SetDate / 10000000 - 1644473600`
LastSet2=`expr $LastSet - 10000000000`
Time=`date +%s`
TimeSinceSet=`expr $Time - $LastSet2`
DaysSinceSet=`expr $TimeSinceSet / 86400`
DaysLeft=`expr $PwdPolicy - $DaysSinceSet`
if [[ $DaysLeft -le 14 ]];
                 then
                            CHANGE=$(osascript -e 'tell application "System Events" to display dialog "Your password will expire in '$DaysLeft' days." with title "FICO CORP Password" buttons {"Change Password Now", "Cancel"} default button "Change Password Now" giving up after 300 with icon path to resource "AccountsPref.icns" in bundle "/System/Library/PreferencePanes/Accounts.prefPane/Contents/Resources"')
                            if [[ $CHANGE =~ Password ]];
                                then
                                osascript -e 'tell application id "com.apple.systempreferences"' -e "activate" -e 'set the current pane to pane id "com.apple.preferences.users"' -e "end tell"
                                else
                                log "User clicked cancel"
fi
fi
fi
exit 0

####################################################

#LaunchAgent item, needs to be placed in /Library/LaunchAgents/
#net.fico.passchg.plist filename

####################################################
#postflight script to schange permissions on the script and plist.
#!/bin/sh
## postinstall

logFile="/private/var/log/passch_install.log"
log () {
echo $1
echo $(date "+%Y-%m-%d %H:%M:%S: ") $1 >> $logFile
}

chown root:wheel /Library/LaunchAgents/net.fico.passchg.plist
chmod 644 /Library/LaunchAgents/net.fico.passchg.plist
chmod +x /Library/passwordchange/Scripts/passchange.sh

log "change perms on script and plist"

launchctl load /Library/LaunchAgents/net.fico.passchg.plist
log "loaded job"

exit 0        ## Success
exit 1        ## Failure

####################################################

Enjoy.
tausif

Lync for mac 14.0.8 package

2014-04-19T11:54:00.002-07:00

So microsoft brought out an update to Lync for mac, this update fixes the contacts not searchable issue on mavericks. There are a few changes when its installed though.

Previously in order to auto populate a Lync users ID from the AD server all we had to do was populate the com.microsoft.Lync.plist with the sign in name and Lync address.

But in Lync 14.0.8 the /Users/UserName/Library/Preferences/com.microsoft.Lync.plist file is created only when lync is launched for the first time and the license agreement accepted. So for a new install the old method doesn't work. We worked around it by displaying the sign-in details as part of a postflight script that ran after Lync got installed.

To create the lync for mac package use composer to capture a snapshot before Lync is installed.

Modify the MicrosoftLyncRegistrationDB.plist located at /Library/Preferences with the Lync internal and external server name.

Create the package after Lync is installed and remove unnecessary items.
You'll need to make sure that the modified MicrosoftLyncRegistrationDB.plist is in the package,

--> Then put in preflight and postflight scripts as follows:Then after putting in the scripts Build your pkg.
I'll put in my scripts here, on condition that you credit me with any future use:
Preupgrade.sh:
################################################################
#!/bin/sh
## preinstall
#Lync for mac preupgrade script created by tausif
#created to kill lync and remove the sip_* directory in current AD users home folder .
USERNAME=$(ls -l /dev/console | awk '{print $3}' )
#get console user
HOME=$(sudo dscl . -read /Users/$USERNAME NFSHomeDirectory | awk '{print $2}')
#get current users home directory
MobileUsers=`dscl . read /Users/$USERNAME OriginalNodeName | grep "Active Directory"`
#this is to filter out local users and target only AD users
logFile="/private/var/log/LyncPreinstall.log"
log () {
echo $1
echo $(date "+%Y-%m-%d %H:%M:%S: ") $1 >> $logFile
}

LYNC_PID=$(ps ax | grep "/Applications/Microsoft Lync.app/Contents/MacOS/Microsoft Lync" | grep -v grep | awk '{ print $1 }')
kill -9 ${LYNC_PID}
if [ $? = 0 ] ; then
log "Lync is open killing it now "
else
log "Lync is not running"
fi
for username in $MobileUsers
do
rm -rf $HOME/Documents/Microsoft\ User\ Data/Microsoft\ Lync\ Data/sip_*
log "Removed SIP dir"
done

exit 0          ## Success
exit 1          ## Failure

################################################################

Postfilght.sh:
################################################################
#!/bin/sh
## postinstall.sh
#Lync for mac postupgrade script created by tausif
#created to install lync, diplay Lync credentials to user,add lync to user's dock and remove the sip_* #directory in current AD users home folder .
USERNAME=$(ls -l /dev/console | awk '{print $3}' )
#get current user
HOME=$(sudo dscl . -read /Users/$USERNAME NFSHomeDirectory | awk '{print $2}')
#get current users home directory
EMAILADDRESS=$( dscl /Search -read /Users/$USERNAME | grep -i msRTCSIP-PrimaryUserAddress | awk '{print $2}'| cut -c 5- )
#very tricky get Lync signin address
CORP='CORP\\'
LYNCNAME=$CORP$USERNAME
#do this because osascript is strange when run from shell
MobileUsers=`dscl . read /Users/$USERNAME OriginalNodeName | grep "Active Directory"`
#filter only for AD users, we don't want to do this from a local account
logFile="/private/var/log/LyncPostinstall.log"
log () {
echo $1
echo $(date "+%Y-%m-%d %H:%M:%S: ") $1 >> $logFile
}
#log everything
#check for local user running this.
if [[ $MobileUsers != " /Active Directory/CORP/corp.fairisaac.com" ]];
then
/usr/bin/osascript << EOF
tell application "System Events"
    activate
    display dialog "Lync auto-setup applies only to Active Directory accounts. Aborting " with title "Aborting" with icon note buttons {"OK"} default button 1
end tell
EOF
log "Local account used"
exit 1
fi
#tell user his lync details
/usr/bin/osascript << EOF
tell application "System Events"
        activate
        display dialog "Please note your sign in details and click ok to complete the Installation" & "\nLync sign-in Address: \"$EMAILADDRESS\"" & " \nLync Username: \"$LYNCNAME\" " with title "Lync Sign in Details" with icon note buttons {"OK"} default button 1
    end tell
EOF
log "sign in details displayed"
#add lync icon to dock
for username in $MobileUsers
do
defaults write $HOME/Library/Preferences/com.apple.dock.plist persistent-apps -array-add "tile-datafile-data_CFURLString/Applications/Microsoft Lync.app/_CFURLStringType0"
done
log "Lync icon added to dock"
sleep 5

chown $USERNAME:"CORP\Domain Users" $HOME/Library/Preferences/com.apple.dock.plist
chmod 600 $HOME/Library/Preferences/com.apple.dock.plist
log "perms changed on dock plist"
#bounce dock
killall -HUP cfprefsd
#cfprefsd for mavericks
killall -HUP Dock

log "bounced dock"

exit 0       ## Success
exit 1       ## Failure