assets/control1.xml
|
<?xml version="1.0" encoding="ISO-8859-1"?>
<configuration version="1.0.10" comment="FudgePop - sample windows device configuration control file"> <control enabled="true" exclude="" comment="kill switch" version="1712.27.1" /> <priority order="files,folders,modules,deployments,removals,upgrades,appxremovals,registry,services,shortcuts,opapps,permissions,updates" /> <collections comment="computer groups"> <collection name="developers" members="computer1,computer2" comment="Developer Computers" /> <collection name="engineers" members="computer3,computer4" comment="Engineers and Designers workstations" /> <collection name="general" members="computer5,computer6" comment="General user computers" /> </collections> <deployments comment="packages to install or upgrade"> <deployment device="all" user="all" enabled="false" when="now" update="false">7zip,googlechrome,notepadplusplus,office365proplus</deployment> <deployment collection="developers" enabled="false" when="now">visualstudiocode,vscode-powershell,vscode-icons,vscode-azurerm-tools,vscode-mssql,git,azcopy,microsoftazurestorageexplorer,sysinternals,slack,teamviewer,putty,wmicc,wmiexplorer</deployment> </deployments> <removals comment="packages to remove"> <removal device="all" user="all" enabled="false" when="now"></removal> <removal device="computer1" user="Jane Doe" enabled="false" when="now">vscode-powershell,vscode-icons,visualstudiocode</removal> <removal collection="developers" enabled="false" when="now"></removal> </removals> <appxremovals comment="store apps to remove"> <appxremoval device="computer1" user="Jane Doe" enabled="false" when="now" comment="">CandyCrush,MineCraft,Facebook,Twitter,MarchofEmpires</appxremoval> </appxremovals> <folders comment="folders to create or manage"> <folder device="all" enabled="false" action="create" path="c:\programdata\fudgepop" comment="" /> <folder device="all" enabled="false" action="empty" path="c:\windows\temp" comment="" /> <folder device="computer1" enabled="false" action="delete" path="c:\TestFolder" comment="" /> <folder collection="developers" enabled="false" action="create" path="c:\gitrepos" comment="" /> </folders> <files comment="files to create or manage"> <file device="computer1" enabled="false" action="rename" source="c:\TestFolder\test1.txt" target="c:\TestFolder\test100.txt" /> <file device="computer1" enabled="false" action="move" source="c:\TestFolder\test2.txt" target="c:\TestFolder\test2.txt" /> <file device="computer1" enabled="false" action="copy" source="\\server123\data\test123.txt" target="c:\TestFolder\test123.txt" /> <file device="computer1" enabled="false" action="delete" source="c:\TestFolder\test3.txt" /> <file collection="developers" enabled="false" action="download" source="http://www.7-zip.org/a/7z1701-x64.msi" target="c:\windows\temp\" /> </files> <registry comment="registry keys and values to create or manage"> <reg device="all" enabled="false" action="create" path="HKLM:\software\fudgepop" value="CustomValue" data="$(Get-Date)" type="string" /> <reg device="all" enabled="false" action="create" path="HKLM:\software\fudgepop" value="ControlVersion" data="$controlversion" type="string" /> </registry> <modules comment="powershell modules"> <module collection="developers" enabled="false" name="platyps" version="latest" when="now" comment="platyPS powershell documentation" /> <module collection="developers" enabled="false" name="AzureRM" version="latest" when="now" comment="Azure RM powershell" /> </modules> <services comment="services to configure or manage"> <service device="all" enabled="false" name="RemoteRegistry" action="modify" config="startup=automatic" /> <service device="computer1" enabled="false" name="PcaSvc" action="restart" config="" /> <service collection="developers" enabled="false" name="Beep" action="modify" config="startup=disabled" /> </services> <shortcuts comment="shortcuts to create, modify or remove. for path ref: https://msdn.microsoft.com/en-us/library/system.environment.specialfolder.aspx"> <shortcut device="all" enabled="false" action="create" name="Internet Explorer" type="lnk" target="c:\program files\internet explorer\iexplore.exe" path="commondesktop" force="true" description="Internet Explorer" windowstyle="normal" args="" workingpath="" /> <shortcut collection="engineers" enabled="false" action="create" name="Autodesk" type="url" path="http://www.autodesk.com" force="true" /> </shortcuts> <opapps comment="on prem win32 application deployments"> <opapp collection="developers" enabled="false" action="install" name="Contoso App 1.23" when="now" run="msiexec /i \\server123\apps\contoso\app123.msi /q /norestart" platforms="win7x64,win10x64" restart="false" detect="capp123" /> </opapps> <detectionrules comment="used for verifying win32 app installs"> <detectionrule name="capp123" app="Contoso App 1.23" path="HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{XX0ABD92-53DF-44EC-C647-110117141167}" value="" /> <detectionrule name="RDCMan27" app="RDC Manager 2.7" path="HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{0240359E-6A4C-4884-9E94-B397A02D893C}" value="" /> </detectionrules> <permissions comment="configure security permissions on local resources"> <permission collection="developers" enabled="false" path="c:\gitrepos" principals="users" rights="modify" comment="to maintain git repos" /> </permissions> <groups comment="local security groups"> <group collection="developers" enabled="false" groupname="Administrators" action="addmember">jdoe</group> </groups> <updates comment="force microsoft updates download and install cycle"> <update device="all" enabled="false" when="daily" /> </updates> </configuration> |