SCCM / MECM (ConfigMgr)¶

# List the main subkeys of the CCM hive
Get-ChildItem "HKLM:\SOFTWARE\Microsoft\CCM" |
    Select-Object PSChildName | Sort-Object PSChildName

# Read client identity information
$idPath = "HKLM:\SOFTWARE\Microsoft\CCM\ClientIdentificationInformation"
Get-ItemProperty -Path $idPath | Select-Object ClientId, PreviousClientId, ReservedUUID

# Read current site assignment
$smsPath = "HKLM:\SOFTWARE\Microsoft\SMS\Mobile Client"
$ccmPath = "HKLM:\SOFTWARE\Microsoft\CCM"

$siteCode = (Get-ItemProperty -Path $smsPath -Name "AssignedSiteCode" -ErrorAction SilentlyContinue).AssignedSiteCode
$mp = (Get-ItemProperty -Path $ccmPath -Name "SMSSLP" -ErrorAction SilentlyContinue).SMSSLP

Write-Output "Site assigne : $siteCode"
Write-Output "Management Point : $mp"

# View Management Point configuration
$mpPath = "HKLM:\SOFTWARE\Microsoft\CCM"
$props = Get-ItemProperty -Path $mpPath

Write-Output "MP actuel       : $($props.SMSSLP)"
Write-Output "DNS Suffix      : $($props.DNSSUFFIX)"
Write-Output "Port HTTP       : $($props.HttpPort)"
Write-Output "Port HTTPS      : $($props.HttpsPort)"

# Force site reassignment
$mobilePath = "HKLM:\SOFTWARE\Microsoft\SMS\Mobile Client"
Set-ItemProperty -Path $mobilePath -Name "AssignedSiteCode" -Value "PS2" -Type String

# Trigger a machine policy refresh to apply the change
Invoke-WmiMethod -Namespace "root\ccm" -Class "SMS_Client" `
    -Name "TriggerSchedule" -ArgumentList "{00000000-0000-0000-0000-000000000021}"

Write-Output "Reassignation au site PS2 declenchee."

# Read cache settings
$cachePath = "HKLM:\SOFTWARE\Microsoft\CCM\SoftMgmtAgent"
$props = Get-ItemProperty -Path $cachePath -ErrorAction SilentlyContinue

Write-Output "Taille du cache (Mo)  : $($props.CacheSize)"
Write-Output "Emplacement du cache  : $($props.CacheLocation)"
Write-Output "Limite taille         : $($props.CacheSizeOverride)"

# Increase cache size to 30 GB
$cachePath = "HKLM:\SOFTWARE\Microsoft\CCM\SoftMgmtAgent"
Set-ItemProperty -Path $cachePath -Name "CacheSize" -Value 30720 -Type DWord

# Verify the change
$newSize = (Get-ItemProperty -Path $cachePath -Name "CacheSize").CacheSize
Write-Output "Nouvelle taille du cache : $($newSize) Mo ($([math]::Round($newSize/1024, 1)) Go)"

# Change cache location to D: drive
$cachePath = "HKLM:\SOFTWARE\Microsoft\CCM\SoftMgmtAgent"

# Stop the SCCM client service
Stop-Service CcmExec -Force

# Update registry
Set-ItemProperty -Path $cachePath -Name "CacheLocation" -Value "D:\ccmcache" -Type String

# Create the new directory
New-Item -Path "D:\ccmcache" -ItemType Directory -Force | Out-Null

# Restart the service
Start-Service CcmExec

Write-Output "Cache deplace vers D:\ccmcache"

# Recommended: Use WMI to resize cache
$cache = Get-WmiObject -Namespace "root\ccm\SoftMgmtAgent" -Class "CacheConfig"
$cache.Size = 30720
$cache.Put()

# Verify via registry
(Get-ItemProperty "HKLM:\SOFTWARE\Microsoft\CCM\SoftMgmtAgent" -Name "CacheSize").CacheSize

# Example 1: Detect if 7-Zip is installed (registry key exists)
$path = "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\7-Zip"
$detected = Test-Path $path
Write-Output "7-Zip detecte : $detected"

# Example 2: Detect by version comparison (value >= expected)
$path = "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\7-Zip"
$version = (Get-ItemProperty -Path $path -Name "DisplayVersion" -ErrorAction SilentlyContinue).DisplayVersion
$minVersion = "23.01"
$detected = [version]$version -ge [version]$minVersion
Write-Output "Version installee : $version | Minimum requis : $minVersion | Detecte : $detected"

# 64-bit application: standard path
$path64 = "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{APP-GUID}"

# 32-bit application on 64-bit OS: redirected path
$path32 = "HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\{APP-GUID}"

# In SCCM detection rule: check the "This registry key is associated with a 32-bit application
# on 64-bit systems" checkbox to search in WOW6432Node
Write-Output "64-bit path exists : $(Test-Path $path64)"
Write-Output "32-bit path exists : $(Test-Path $path32)"

# Advanced detection script for SCCM deployment type
# Returns output to STDOUT if detected, nothing otherwise
$appKey = "HKLM:\SOFTWARE\VendorApp\Config"
$minVer = "4.2.0"

if (Test-Path $appKey) {
    $ver = (Get-ItemProperty $appKey -Name "Version" -ErrorAction SilentlyContinue).Version
    if ($ver -and [version]$ver -ge [version]$minVer) {
        Write-Output "Detected: $ver"
    }
}
# If nothing is output, SCCM considers the app NOT detected

# Step 1: Verify that the registry key to inventory exists
$customKey = "HKLM:\SOFTWARE\CustomApp\Settings"
Get-ItemProperty -Path $customKey -ErrorAction SilentlyContinue |
    Select-Object Version, LicenseType, InstallDate

# Check hardware inventory schedule and last run
$invPath = "HKLM:\SOFTWARE\Microsoft\CCM\Scheduler"
$hwInv = Get-ChildItem $invPath -Recurse -ErrorAction SilentlyContinue |
    Where-Object { $_.PSChildName -match "HardwareInventory" }

if ($hwInv) {
    Get-ItemProperty $hwInv.PSPath | Select-Object ScheduledMessageID, TriggerState
}

# Keys scanned by SCCM software inventory
$paths = @(
    "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall",
    "HKLM:\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall",
    "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall"
)

foreach ($p in $paths) {
    $count = (Get-ChildItem $p -ErrorAction SilentlyContinue).Count
    Write-Output "$p : $count applications"
}

# Content transfer settings
$ctmPath = "HKLM:\SOFTWARE\Microsoft\CCM\ContentTransferManager"
Get-ItemProperty -Path $ctmPath -ErrorAction SilentlyContinue |
    Select-Object MaxRetryCount, RetryDelay, MaxBandwidthPercentage

# Network configuration for SCCM client
$netPath = "HKLM:\SOFTWARE\Microsoft\CCM\NetworkConfig"
Get-ItemProperty -Path $netPath -ErrorAction SilentlyContinue |
    Select-Object BoundaryGroupID, ContentLocation, ManagementPointUrl

# Check content locations cached by the client
$locPath = "HKLM:\SOFTWARE\Microsoft\CCM\ContentTransferManager\ContentLocations"
Get-ChildItem $locPath -ErrorAction SilentlyContinue |
    ForEach-Object {
        Get-ItemProperty $_.PSPath | Select-Object ContentId, ContentVersion, LocationPath
    } | Format-Table -AutoSize

# Read client health evaluation results
$evalPath = "HKLM:\SOFTWARE\Microsoft\CCM\CcmEval"
$props = Get-ItemProperty -Path $evalPath -ErrorAction SilentlyContinue

Write-Output "Derniere evaluation  : $($props.LastEvalTime)"
Write-Output "Resultat             : $($props.LastEvalResult)"
Write-Output "Reparation necessaire: $($props.NeedRemediation)"

# Trigger client health evaluation manually
$ccmEvalExe = "C:\Windows\CCM\CcmEval.exe"
if (Test-Path $ccmEvalExe) {
    Start-Process $ccmEvalExe -Wait
    $result = (Get-ItemProperty "HKLM:\SOFTWARE\Microsoft\CCM\CcmEval" `
        -Name "LastEvalResult").LastEvalResult
    Write-Output "Resultat de l'evaluation : $result"
} else {
    Write-Output "CcmEval.exe introuvable — le client SCCM n'est peut-etre pas installe."
}

# Repair the SCCM client
$ccmRepairExe = "C:\Windows\CCM\CcmRepair.exe"
if (Test-Path $ccmRepairExe) {
    Write-Output "Lancement de la reparation du client CCM..."
    Start-Process $ccmRepairExe -Wait
    Write-Output "Reparation terminee. Redemarrage du service..."
    Restart-Service CcmExec -Force
    Write-Output "Service CcmExec redemarre."
} else {
    # Alternative: reinstall client
    Write-Output "CcmRepair introuvable. Reinstallation complete recommandee."
    Write-Output "Commande : ccmsetup.exe /remediate:client"
}

# Quick check of recent health evaluation logs
Get-Content "C:\Windows\CCM\Logs\CcmEval.log" -Tail 20 |
    Select-String -Pattern "Result|Error|Pass|Fail"

# Run diagnostic on a list of problematic machines
$machines = @("PC-COMPTA-01", "PC-RH-05", "PC-DIR-12")

$results = foreach ($pc in $machines) {
    Invoke-Command -ComputerName $pc -ScriptBlock {
        $ccm = Get-ItemProperty "HKLM:\SOFTWARE\Microsoft\CCM" -ErrorAction SilentlyContinue
        $eval = Get-ItemProperty "HKLM:\SOFTWARE\Microsoft\CCM\CcmEval" -ErrorAction SilentlyContinue
        $svc = Get-Service CcmExec -ErrorAction SilentlyContinue
        $site = (Get-ItemProperty "HKLM:\SOFTWARE\Microsoft\SMS\Mobile Client" `
            -Name "AssignedSiteCode" -ErrorAction SilentlyContinue).AssignedSiteCode
        $clientId = (Get-ItemProperty "HKLM:\SOFTWARE\Microsoft\CCM\ClientIdentificationInformation" `
            -Name "ClientId" -ErrorAction SilentlyContinue).ClientId

        [PSCustomObject]@{
            Computer   = $env:COMPUTERNAME
            Service    = $svc.Status
            SiteCode   = $site
            ClientId   = $clientId
            MP         = $ccm.SMSSLP
            EvalResult = $eval.LastEvalResult
            LastEval   = $eval.LastEvalTime
        }
    } -ErrorAction SilentlyContinue
}

$results | Format-Table -AutoSize

# Fix PC-RH-05: update the Management Point
Invoke-Command -ComputerName "PC-RH-05" -ScriptBlock {
    # Update the management point
    Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\CCM" `
        -Name "SMSSLP" -Value "sccm-mp01.entreprise.com" -Type String

    # Restart the CCM service to apply
    Restart-Service CcmExec -Force

    # Trigger a machine policy refresh
    Start-Sleep -Seconds 5
    Invoke-WmiMethod -Namespace "root\ccm" -Class "SMS_Client" `
        -Name "TriggerSchedule" -ArgumentList "{00000000-0000-0000-0000-000000000021}"

    Write-Output "MP mis a jour et politique rafraichie sur $env:COMPUTERNAME"
}

# Fix PC-DIR-12: run CcmRepair remotely
Invoke-Command -ComputerName "PC-DIR-12" -ScriptBlock {
    # Run client health evaluation with remediation
    $evalExe = "C:\Windows\CCM\CcmEval.exe"
    if (Test-Path $evalExe) {
        Start-Process $evalExe -Wait
        $result = (Get-ItemProperty "HKLM:\SOFTWARE\Microsoft\CCM\CcmEval" `
            -Name "LastEvalResult").LastEvalResult

        if ($result -ne "Passed") {
            Write-Output "Evaluation echouee. Lancement de CcmRepair..."
            Start-Process "C:\Windows\CCM\CcmRepair.exe" -Wait
            Restart-Service CcmExec -Force
        }
        $final = (Get-ItemProperty "HKLM:\SOFTWARE\Microsoft\CCM\CcmEval" `
            -Name "LastEvalResult").LastEvalResult
        Write-Output "Etat final de $($env:COMPUTERNAME) : $final"
    }
}

# Fix PC-COMPTA-01: full client reinstallation
Invoke-Command -ComputerName "PC-COMPTA-01" -ScriptBlock {
    # Uninstall existing broken client
    $setupExe = "C:\Windows\ccmsetup\ccmsetup.exe"
    if (Test-Path $setupExe) {
        Start-Process $setupExe -ArgumentList "/uninstall" -Wait
        Start-Sleep -Seconds 30
    }

    # Clean up leftover registry keys
    Remove-Item "HKLM:\SOFTWARE\Microsoft\CCM" -Recurse -Force -ErrorAction SilentlyContinue
    Remove-Item "HKLM:\SOFTWARE\Microsoft\SMS" -Recurse -Force -ErrorAction SilentlyContinue

    # Reinstall from network share
    $installCmd = "\\sccm-mp01\SMS_PS1\Client\ccmsetup.exe"
    $params = "SMSSITECODE=PS1 SMSMP=sccm-mp01.entreprise.com /forceinstall"
    Start-Process $installCmd -ArgumentList $params
    Write-Output "Reinstallation du client lancee sur $env:COMPUTERNAME"
}

# Re-run diagnostic after fixes (wait 15 minutes for client to settle)
$machines = @("PC-COMPTA-01", "PC-RH-05", "PC-DIR-12")

$results = foreach ($pc in $machines) {
    Invoke-Command -ComputerName $pc -ScriptBlock {
        $ccm = Get-ItemProperty "HKLM:\SOFTWARE\Microsoft\CCM" -ErrorAction SilentlyContinue
        $eval = Get-ItemProperty "HKLM:\SOFTWARE\Microsoft\CCM\CcmEval" -ErrorAction SilentlyContinue
        $svc = Get-Service CcmExec -ErrorAction SilentlyContinue

        [PSCustomObject]@{
            Computer   = $env:COMPUTERNAME
            Service    = $svc.Status
            MP         = $ccm.SMSSLP
            EvalResult = $eval.LastEvalResult
        }
    } -ErrorAction SilentlyContinue
}

$results | Format-Table -AutoSize