DSCResources/MSFT_SPProjectServerADResourcePoolSync/MSFT_SPProjectServerADResourcePoolSync.psm1
|
$script:resourceModulePath = Split-Path -Path (Split-Path -Path $PSScriptRoot -Parent) -Parent $script:modulesFolderPath = Join-Path -Path $script:resourceModulePath -ChildPath 'Modules' $script:resourceHelperModulePath = Join-Path -Path $script:modulesFolderPath -ChildPath 'SharePointDsc.Util' Import-Module -Name (Join-Path -Path $script:resourceHelperModulePath -ChildPath 'SharePointDsc.Util.psm1') function Get-TargetResource { [CmdletBinding()] [OutputType([System.Collections.Hashtable])] param ( [Parameter(Mandatory = $true)] [System.String] $Url, [Parameter()] [System.String[]] $GroupNames, [Parameter()] [ValidateSet("Present", "Absent")] [System.String] $Ensure = "Present", [Parameter()] [System.Boolean] $AutoReactivateUsers = $false, [Parameter()] [System.Management.Automation.PSCredential] $InstallAccount ) Write-Verbose -Message "Getting AD Resource Pool Sync settings for $Url" if ((Get-SPDscInstalledProductVersion).FileMajorPart -lt 16) { throw [Exception] ("Support for Project Server in SharePointDsc is only valid for " + ` "SharePoint 2016 and 2019.") } $result = Invoke-SPDscCommand -Credential $InstallAccount ` -Arguments @($PSBoundParameters, $PSScriptRoot) ` -ScriptBlock { $params = $args[0] $scriptRoot = $args[1] $modulePath = "..\..\Modules\SharePointDsc.ProjectServer\ProjectServerConnector.psm1" Import-Module -Name (Join-Path -Path $scriptRoot -ChildPath $modulePath -Resolve) $webAppUrl = (Get-SPSite -Identity $params.Url).WebApplication.Url $useKerberos = -not (Get-SPAuthenticationProvider -WebApplication $webAppUrl -Zone Default).DisableKerberos $adminService = New-SPDscProjectServerWebService -PwaUrl $params.Url ` -EndpointName Admin ` -UseKerberos:$useKerberos $script:currentSettings = $null $script:reactivateUsers = $false Use-SPDscProjectServerWebService -Service $adminService -ScriptBlock { $script:currentSettings = $adminService.GetActiveDirectorySyncEnterpriseResourcePoolSettings2() $secondSettings = $adminService.GetActiveDirectorySyncEnterpriseResourcePoolSettings() $script:reactivateUsers = $secondSettings.AutoReactivateInactiveUsers } if ($null -eq $script:currentSettings) { return @{ Url = $params.Url GroupNames = @() Ensure = "Absent" AutoReactivateUsers = $false InstallAccount = $params.InstallAccount } } else { if ($null -eq $script:currentSettings.ADGroupGuids -or $script:currentSettings.ADGroupGuids.Length -lt 1) { return @{ Url = $params.Url GroupNames = @() Ensure = "Absent" AutoReactivateUsers = $script:reactivateUsers InstallAccount = $params.InstallAccount } } else { $adGroups = @() $script:currentSettings.ADGroupGuids | ForEach-Object -Process { $groupName = Convert-SPDscADGroupIDToName -GroupID $_ $adGroups += $groupName } return @{ Url = $params.Url GroupNames = $adGroups Ensure = "Present" AutoReactivateUsers = $script:reactivateUsers InstallAccount = $params.InstallAccount } } } } return $result } function Set-TargetResource { [CmdletBinding()] param ( [Parameter(Mandatory = $true)] [System.String] $Url, [Parameter()] [System.String[]] $GroupNames, [Parameter()] [ValidateSet("Present", "Absent")] [System.String] $Ensure = "Present", [Parameter()] [System.Boolean] $AutoReactivateUsers = $false, [Parameter()] [System.Management.Automation.PSCredential] $InstallAccount ) Write-Verbose -Message "Setting AD Resource Pool Sync settings for $Url" if ((Get-SPDscInstalledProductVersion).FileMajorPart -lt 16) { throw [Exception] ("Support for Project Server in SharePointDsc is only valid for " + ` "SharePoint 2016 and 2019.") } if ($Ensure -eq "Present") { Invoke-SPDscCommand -Credential $InstallAccount ` -Arguments $PSBoundParameters ` -ScriptBlock { $params = $args[0] $groupIDs = New-Object -TypeName "System.Collections.Generic.List[System.Guid]" $params.GroupNames | ForEach-Object -Process { $groupName = Convert-SPDscADGroupNameToID -GroupName $_ $groupIDs.Add($groupName) } Enable-SPProjectActiveDirectoryEnterpriseResourcePoolSync -Url $params.Url ` -GroupUids $groupIDs.ToArray() if ($params.ContainsKey("AutoReactivateUsers") -eq $true) { $webAppUrl = (Get-SPSite -Identity $params.Url).WebApplication.Url $useKerberos = -not (Get-SPAuthenticationProvider -WebApplication $webAppUrl -Zone Default).DisableKerberos $adminService = New-SPDscProjectServerWebService -PwaUrl $params.Url ` -EndpointName Admin ` -UseKerberos:$useKerberos Use-SPDscProjectServerWebService -Service $adminService -ScriptBlock { $settings = $adminService.GetActiveDirectorySyncEnterpriseResourcePoolSettings() $settings.AutoReactivateInactiveUsers = $params.AutoReactivateUsers $adminService.SetActiveDirectorySyncEnterpriseResourcePoolSettings($settings) } } } } else { Invoke-SPDscCommand -Credential $InstallAccount ` -Arguments $PSBoundParameters ` -ScriptBlock { $params = $args[0] Disable-SPProjectActiveDirectoryEnterpriseResourcePoolSync -Url $params.Url } } } function Test-TargetResource { [CmdletBinding()] [OutputType([System.Boolean])] param ( [Parameter(Mandatory = $true)] [System.String] $Url, [Parameter()] [System.String[]] $GroupNames, [Parameter()] [ValidateSet("Present", "Absent")] [System.String] $Ensure = "Present", [Parameter()] [System.Boolean] $AutoReactivateUsers = $false, [Parameter()] [System.Management.Automation.PSCredential] $InstallAccount ) Write-Verbose -Message "Testing AD Resource Pool Sync settings for $Url" $PSBoundParameters.Ensure = $Ensure $CurrentValues = Get-TargetResource @PSBoundParameters Write-Verbose -Message "Current Values: $(Convert-SPDscHashtableToString -Hashtable $CurrentValues)" Write-Verbose -Message "Target Values: $(Convert-SPDscHashtableToString -Hashtable $PSBoundParameters)" $paramsToCheck = @("Ensure") if ($Ensure -eq "Present") { $paramsToCheck += "GroupNames" if ($PSBoundParameters.ContainsKey("AutoReactivateUsers") -eq $true) { $paramsToCheck += "AutoReactivateUsers" } } return Test-SPDscParameterState -CurrentValues $CurrentValues ` -DesiredValues $PSBoundParameters ` -ValuesToCheck $paramsToCheck } Export-ModuleMember -Function *-TargetResource |