179 lines
No EOL
7.7 KiB
PowerShell
179 lines
No EOL
7.7 KiB
PowerShell
# --------------------------------------------------------------------------------
|
|
# Logging setup
|
|
# --------------------------------------------------------------------------------
|
|
$LogDirectory = "C:\Quest"
|
|
$LogDate = Get-Date -Format "yyyy-MM-dd"
|
|
$RandomSuffix = Get-Random -Minimum 1000 -Maximum 9999
|
|
$LogFile = Join-Path $LogDirectory "cleanup-${LogDate}-${RandomSuffix}.log"
|
|
|
|
# Create log directory if it doesn't exist
|
|
if (-not (Test-Path $LogDirectory)) {
|
|
New-Item -Path $LogDirectory -ItemType Directory -Force | Out-Null
|
|
}
|
|
|
|
# Function for timestamped logging
|
|
function Write-Log {
|
|
param(
|
|
[Parameter(Mandatory=$true)]
|
|
[string]$Message,
|
|
[string]$Level = "INFO"
|
|
)
|
|
|
|
$Timestamp = Get-Date -Format "yyyy-MM-dd HH:mm:ss"
|
|
$LogEntry = "[$Timestamp] [$Level] $Message"
|
|
|
|
# Write to log file
|
|
$LogEntry | Out-File -FilePath $LogFile -Append -Encoding UTF8
|
|
|
|
# Write to console
|
|
Write-Host $LogEntry
|
|
}
|
|
|
|
# Initialize log file
|
|
"================================================================================" | Out-File -FilePath $LogFile -Append -Encoding UTF8
|
|
"Script started at $(Get-Date -Format 'yyyy-MM-dd HH:mm:ss')" | Out-File -FilePath $LogFile -Append -Encoding UTF8
|
|
"Log file: $LogFile" | Out-File -FilePath $LogFile -Append -Encoding UTF8
|
|
"================================================================================" | Out-File -FilePath $LogFile -Append -Encoding UTF8
|
|
"" | Out-File -FilePath $LogFile -Append -Encoding UTF8
|
|
|
|
# --------------------------------------------------------------------------------
|
|
# Quest Help download and installation
|
|
# --------------------------------------------------------------------------------
|
|
Write-Log "Checking if Quest Help exists..."
|
|
|
|
if (Test-Path "C:\Program Files\Quest Help\Quest Help.exe") {
|
|
Write-Log "Quest Help found! Skipping installation..." -Level "INFO"
|
|
} else {
|
|
Write-Log "Quest Help not found! Downloading installer..." -Level "WARNING"
|
|
Invoke-WebRequest -Uri "https://hulpvanopafstand.be/assets/downloads/quest_help.exe" -OutFile "C:\Quest\quest_help.exe"
|
|
Write-Log "Download completed." -Level "INFO"
|
|
Write-Log "Starting installer..." -Level "INFO"
|
|
Start-Process "C:\Quest\quest_help.exe"
|
|
Write-Log "Installer started." -Level "INFO"
|
|
}
|
|
|
|
Write-Log "Quest Help check completed." -Level "INFO"
|
|
"" | Out-File -FilePath $LogFile -Append -Encoding UTF8
|
|
|
|
# --------------------------------------------------------------------------------
|
|
# Add defender exclusions
|
|
# --------------------------------------------------------------------------------
|
|
Write-Log "Adding Windows Defender exclusions..."
|
|
|
|
$ExclusionPaths = @(
|
|
"C:\Quest\*",
|
|
"C:\Program Files\Mesh Agent\*",
|
|
"C:\Program Files\TacticalAgent\*",
|
|
"C:\ProgramData\TacticalRMM\*",
|
|
"C:\Windows\Temp\is-*.tmp\tacticalagent*"
|
|
)
|
|
|
|
$ExclusionProcesses = @(
|
|
"C:\Program Files\TacticalAgent\tacticalrmm.exe",
|
|
"C:\ProgramData\TacticalRMM\tacticalagent*",
|
|
"C:\Windows\Temp\is-*.tmp\tacticalagent*"
|
|
)
|
|
|
|
foreach ($Path in $ExclusionPaths) {
|
|
try {
|
|
Add-MpPreference -ExclusionPath $Path -ErrorAction Stop | Out-Null
|
|
Write-Log "Added exclusion path: $Path" -Level "INFO"
|
|
} catch {
|
|
Write-Log "Failed to add exclusion path: $Path - $($_.Exception.Message)" -Level "ERROR"
|
|
}
|
|
}
|
|
|
|
foreach ($Process in $ExclusionProcesses) {
|
|
try {
|
|
Add-MpPreference -ExclusionProcess $Process -ErrorAction Stop | Out-Null
|
|
Write-Log "Added exclusion process: $Process" -Level "INFO"
|
|
} catch {
|
|
Write-Log "Failed to add exclusion process: $Process - $($_.Exception.Message)" -Level "ERROR"
|
|
}
|
|
}
|
|
|
|
Write-Log "Defender exclusions completed." -Level "INFO"
|
|
"" | Out-File -FilePath $LogFile -Append -Encoding UTF8
|
|
|
|
# --------------------------------------------------------------------------------
|
|
# Enable daily restore points
|
|
# --------------------------------------------------------------------------------
|
|
Write-Log "Setting up daily restore points..."
|
|
|
|
try {
|
|
Enable-ComputerRestore -Drive 'C:' -ErrorAction Stop | Out-Null
|
|
Write-Log "System Restore enabled for C: drive." -Level "INFO"
|
|
} catch {
|
|
Write-Log "Failed to enable System Restore: $($_.Exception.Message)" -Level "ERROR"
|
|
}
|
|
|
|
Register-ScheduledTask -TaskName "Daily System Restore" -Action (New-ScheduledTaskAction -Execute "PowerShell.exe" -Argument "-ExecutionPolicy Bypass -Command `"Checkpoint-Computer -Description \"\"AUTOMATIC-$(Get-Date -Format 'yyyyMMddHHmmss')\"\" -RestorePointType \"\"MODIFY_SETTINGS\"\"`"") -Trigger (New-ScheduledTaskTrigger -Daily -At 9am) -Settings (New-ScheduledTaskSettingsSet -StartWhenAvailable -DontStopOnIdleEnd -RunOnlyIfNetworkAvailable) -Principal (New-ScheduledTaskPrincipal -UserId "NT AUTHORITY\SYSTEM" -LogonType ServiceAccount -RunLevel Highest) -ErrorAction Stop | Out-Null
|
|
Write-Log "Scheduled task 'Daily System Restore' created." -Level "INFO"
|
|
|
|
try {
|
|
Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore" -Name "SystemRestorePointFrequency" -Value 0 -Type DWORD -Force -ErrorAction Stop
|
|
Write-Log "Restore point frequency set to 0 (allows frequent restore points)." -Level "INFO"
|
|
} catch {
|
|
Write-Log "Failed to set restore point frequency: $($_.Exception.Message)" -Level "ERROR"
|
|
}
|
|
|
|
Write-Log "Restore points setup completed." -Level "INFO"
|
|
"" | Out-File -FilePath $LogFile -Append -Encoding UTF8
|
|
|
|
# --------------------------------------------------------------------------------
|
|
# Updating all apps
|
|
# --------------------------------------------------------------------------------
|
|
Write-Log "Upgrading all applications with winget..."
|
|
|
|
try {
|
|
winget upgrade --all 2>&1 | Out-File -FilePath $LogFile -Append -Encoding UTF8
|
|
Write-Log "Winget upgrade completed." -Level "INFO"
|
|
} catch {
|
|
Write-Log "Winget upgrade failed: $($_.Exception.Message)" -Level "ERROR"
|
|
}
|
|
|
|
Write-Log "Application updates completed." -Level "INFO"
|
|
"" | Out-File -FilePath $LogFile -Append -Encoding UTF8
|
|
|
|
# --------------------------------------------------------------------------------
|
|
# Updating Windows
|
|
# --------------------------------------------------------------------------------
|
|
Write-Log "Updating Windows..."
|
|
|
|
try {
|
|
Install-PackageProvider -Name NuGet -MinimumVersion 2.8.5.201 -Force -ErrorAction Stop | Out-Null
|
|
Write-Log "NuGet package provider installed." -Level "INFO"
|
|
} catch {
|
|
Write-Log "Failed to install NuGet: $($_.Exception.Message)" -Level "ERROR"
|
|
}
|
|
|
|
try {
|
|
Install-Module PSWindowsUpdate -Force -AllowClobber -ErrorAction Stop | Out-Null
|
|
Write-Log "PSWindowsUpdate module installed." -Level "INFO"
|
|
} catch {
|
|
Write-Log "Failed to install PSWindowsUpdate: $($_.Exception.Message)" -Level "ERROR"
|
|
}
|
|
|
|
try {
|
|
Import-Module PSWindowsUpdate -ErrorAction Stop
|
|
Write-Log "PSWindowsUpdate module imported." -Level "INFO"
|
|
} catch {
|
|
Write-Log "Failed to import PSWindowsUpdate: $($_.Exception.Message)" -Level "ERROR"
|
|
}
|
|
|
|
try {
|
|
Get-WindowsUpdate -AcceptAll -Install -ErrorAction Stop 2>&1 | Out-File -FilePath $LogFile -Append -Encoding UTF8
|
|
Write-Log "Windows updates installed." -Level "INFO"
|
|
} catch {
|
|
Write-Log "Failed to install Windows updates: $($_.Exception.Message)" -Level "ERROR"
|
|
}
|
|
|
|
Write-Log "Windows update completed." -LEVEL "INFO"
|
|
"" | Out-File -FilePath $LogFile -Append -Encoding UTF8
|
|
|
|
# --------------------------------------------------------------------------------
|
|
# Script completion
|
|
# --------------------------------------------------------------------------------
|
|
Write-Log "Script completed at $(Get-Date -Format 'yyyy-MM-dd HH:mm:ss')" -Level "INFO"
|
|
Write-Log "Log file saved to: $LogFile" -Level "INFO"
|
|
"================================================================================" | Out-File -FilePath $LogFile -Append -Encoding UTF8 |