NewSCCMServer.PS1

function new-SCCMServer {
    param(
        [Parameter(ParameterSetName = 'CMClass')]
        [CM]
        $CMConfig,
        [Parameter(ParameterSetName = 'NoClass')]
        [psobject]
        $envconfig,
        [Parameter(ParameterSetName = 'NoClass')]
        [string]
        $VHDXpath,
        [Parameter(ParameterSetName = 'NoClass')]
        [pscredential]
        $localadmin,
        [Parameter(ParameterSetName = 'NoClass')]
        [string]
        $IPAddress,
        [Parameter(ParameterSetName = 'NoClass')]
        [string]
        $DomainFQDN,
        [Parameter(ParameterSetName = 'NoClass')]
        [pscredential]
        $DomainUser,
        [Parameter(ParameterSetName = 'NoClass')]
        [psobject]
        $config,
        [Parameter(ParameterSetName = 'NoClass')]
        [string]
        $admpwd,
        [Parameter(ParameterSetName = 'NoClass')]
        [string]
        $domainnetbios,
        [Parameter(ParameterSetName = 'NoClass')]
        [string]
        $cmsitecode,
        [Parameter(ParameterSetName = 'NoClass')]
        [string]
        $SCCMDLPreDownloaded,
        [parameter(ParameterSetName = 'NoClass', Mandatory = $false)]
        [switch]
        $vmSnapshotenabled,
        [parameter(ParameterSetName = 'NoClass', Mandatory = $false)]
        [switch]
        $CAS,
        [Parameter(ParameterSetName = 'NoClass')]
        [switch]
        $PRI,
        [Parameter(ParameterSetName = 'NoClass')]
        [string]
        $casservername,
        [Parameter(ParameterSetName = 'NoClass')]
        [int]
        $cores,
        [Parameter(ParameterSetName = 'NoClass')]
        [int]
        $ram,
        [Parameter(ParameterSetName = 'NoClass')]
        [string]
        $name,
        [Parameter(ParameterSetName = 'NoClass')]
        [string]
        $DCIP,
        [Parameter(ParameterSetName = 'NoClass')]
        [string]
        $RefVHDX,
        [Parameter(ParameterSetName = 'NoClass')]
        [string]
        $SQLISO,
        [Parameter(ParameterSetName = 'NoClass')]
        [string]
        $SCCMPath,
        [Parameter(ParameterSetName = 'NoClass')]
        [string]
        $ADKPath,
        [Parameter(ParameterSetName = 'NoClass')]
        [ValidateSet("CAS", "PRI", "CASPRI")]
        [string]
        $CMServerType = "PRI",
        [Parameter(ParameterSetName = 'NoClass')]
        [string]
        $CASIPAddress,
        [Parameter(ParameterSetName = 'NoClass')]
        [string]
        $SCCMVer
    )
    if (!$PSBoundParameters.ContainsKey('CMConfig')) {
        $CMConfig = [CM]::new()
        $CMConfig.AdmPwd = $admpwd
        $CMConfig.cmsitecode = $cmsitecode
        $CMConfig.cores = $Cores
        $CMConfig.ram = $ram
        $CMConfig.domainFQDN = $DomainFQDN
        $CMConfig.domainuser = $DomainUser
        $CMConfig.IPAddress = $IPAddress
        $CMConfig.DCIP = $DCIP
        $CMConfig.localadmin = $localadmin
        $CMConfig.network = $network
        $CMConfig.VHDXpath = $VHDXpath
        $CMConfig.VMSnapshotenabled = $vmSnapshotenabled.IsPresent
        $CMConfig.SCCMDLPreDownloaded = $SCCMDLPreDownloaded
        $CMConfig.name = $name
        $CMConfig.RefVHDX = $RefVHDX
        $CMConfig.SQLISO = $SQLISO
        $CMConfig.SCCMPath = $SCCMPath
        $CMConfig.ADKPath = $ADKPath
        $CMConfig.domainnetbios = $domainnetbios
        $CMConfig.CMServerType = $CMServerType
        $CMConfig.CASIPAddress = $CASIPAddress
        $CMConfig.SCCMVer = $SCCMVer
    }
    $ipsubnet = $CMConfig.IPAddress.substring(0, ($CMConfig.IPAddress.length - ([ipaddress] $CMConfig.IPAddress).GetAddressBytes()[3].count - 1))
    Write-logentry -message "CM Server Started: $(Get-Date)" -type information
    #if ($cas.ispresent) {
    #    $cmname = "$($envconfig.env)`CMCAS"
    #}
    #else {
    #    $cmname = "$($envconfig.env)`CM"
    #}
    write-logentry -message "VM for CM will be named: $($CMConfig.name)" -type information
    Write-LogEntry -Message "CM Settings are: $($CMConfig | ConvertTo-Json)" -Type Information
    write-logentry -message "Path for the VHDX for $($CMConfig.name) is: $($CMConfig.VHDXpath)" -type information
    if (!(Invoke-Pester -tagfilter "CMVM" -passthru -output none).result -ne "Passed") {
        write-logentry -message "CM for env:$($envconfig.env) doesn't exist, creating now" -type information
        if ((Invoke-Pester -tagfilter "CMVHDX" -passthru -output none).result -eq "Passed") {
            write-logentry -message "CM VHDX Already exists at path: $($CMConfig.VHDXpath) Please clean up and ReRun" -type error
            throw "CM VHDX Already Exists at path: $($CMConfig.VHDXpath) Please clean up and Rerun."
        }
        else {
            Copy-Item -Path $cmconfig.RefVHDX -Destination $CMConfig.VHDXpath
            write-logentry -message "Reference VHDX: $($CMConfig.refvhdx) has been copied to: $($CMConfig.VHDXpath)" -type information
            $disk = (mount-vhd -Path $CMConfig.VHDXpath -Passthru | Get-disk | Get-Partition | Where-Object { $_.type -eq 'Basic' }).DriveLetter
            write-logentry -message "$($CMConfig.VHDXpath) has been mounted to allow for file copy to $disk" -type information
            Copy-Item -Path $cmconfig.SCCMPath -Destination "$disk`:\data\SCCM" -Recurse
            write-logentry -message "SCCM Media copied to $disk`:\data\SCCM" -type information
            Copy-Item -Path $cmconfig.ADKPath -Destination "$disk`:\data\adk" -Recurse
            write-logentry -message "ADK Media copied to $disk`:\data\adk" -type information
            Dismount-VHD $CMConfig.VHDXpath
            write-logentry -message "$disk has been dismounted" -type information
        }
        if ((Invoke-Pester -tagfilter "CMVHDX" -passthru -output none).result -ne "Passed") {
            write-logentry -message "Error creating VHDX for CM. BUILD STOPPED" -type error
            throw "Error Creating the VHDX for CM"
        }
        else {
            write-logentry -message "Starting to create $($CMConfig.name)" -type information
            new-vm -name $CMConfig.name -MemoryStartupBytes ($cmconfig.ram * 1gb) -VHDPath $CMConfig.VHDXpath -Generation 2 | Set-VMMemory -DynamicMemoryEnabled:$false 
            write-logentry -message "Setting vCPU for $($CMConfig.name) to 4" -type information
            get-vm -name $CMConfig.name | Set-VMProcessor -Count $CMConfig.cores
            if (!($cmconfig.vmSnapshotenabled)) {
                set-vm -name $CMConfig.name -checkpointtype Disabled
            }
            write-logentry -message "$($CMConfig.name) has been created" -type information
            start-vm -Name $CMConfig.name
            write-logentry -message "CM Server named $($CMConfig.name) has been started" -type information
            Get-VMNetworkAdapter -VMName $CMConfig.name | Connect-VMNetworkAdapter -SwitchName $cmconfig.network
            write-logentry -message "vSwitch $($cmconfig.network) has been attached to $($CMConfig.name)" -type information
        }
        while ((Invoke-Command -VMName $CMConfig.name -Credential $CMConfig.localadmin { "Test" } -ErrorAction SilentlyContinue) -ne "Test") { Start-Sleep -Seconds 5 }
        $cmsessionLA = New-PSSession -vmname $CMConfig.name -credential $CMConfig.localadmin
        if ($null -eq $cmsessionLA) { throw "Issue with CM Local User Account" }
        write-logentry -message "PowerShell Direct session for $($CMConfig.localadmin.username) has been initated with CM server named: $($CMConfig.name)" -type information
        $cmnics = Invoke-Command -session $cmsessionLA -ScriptBlock { Get-NetAdapter }
        write-logentry -message "The following network adaptors $($cmnics -join ",") have been found on: $($CMConfig.name)" -type information
        if ((Invoke-Pester -tagfilter "CMIP" -passthru -output none).result -ne "Passed") {
            $IPGateway = "$ipsubnet`1"
            $null = Invoke-Command -session $cmsessionLA -ScriptBlock { param($t, $i, $g, $d) new-NetIPAddress -InterfaceIndex $t -AddressFamily IPv4 -IPAddress "$i" -PrefixLength 24 -DefaultGateway "$g"; Set-DnsClientServerAddress -ServerAddresses ($d) -InterfaceIndex $t } -ArgumentList $cmnics.InterfaceIndex, $CMConfig.IPAddress, $IPGateway, $CMConfig.DCIP
            write-logentry -message "IP Address $($CMConfig.IPAddress) has been assigned to $($CMConfig.name)" -type information
            start-sleep 300
        }
        if ((Invoke-Pester -tagfilter "CMDOM" -passthru -output none).result -eq "Passed") {
            while ((Invoke-Command -VMName $CMConfig.name -Credential $CMConfig.localadmin { param($i)(test-netconnection "$i" -ErrorAction SilentlyContinue).pingsucceeded } -ArgumentList $cmconfig.DCIP -ErrorAction SilentlyContinue) -ne $true -and $stop -ne (get-date)) { Start-Sleep -Seconds 5 }
            Invoke-Command -session $cmsessionLA -ErrorAction SilentlyContinue -ScriptBlock { param($env, $domuser) Clear-DnsClientCache; Add-Computer -DomainName $env -domainCredential $domuser -Restart; Start-Sleep -Seconds 15; Restart-Computer -Force -Delay 0 } -ArgumentList $cmconfig.domainFQDN, $CMConfig.domainuser
            write-logentry -message "Joined $($CMConfig.name) to domain $($cmconfig.domainFQDN)" -type information
            $stop = (get-date).AddMinutes(5)
            while ((Invoke-Command -VMName $CMConfig.name -Credential $CMConfig.domainuser { "Test" } -ErrorAction SilentlyContinue) -ne "Test" -and $stop -ne (get-date)) { Start-Sleep -Seconds 5 }
        }
        else {
            write-logentry -message "Couldn't find $($cmconfig.domainFQDN)" -type error
            throw "CM Server can't resolve $($cmconfig.domainFQDN)"
        }
        $cmsession = New-PSSession -VMName $CMConfig.name -Credential $CMConfig.domainuser
        write-logentry -message "PowerShell Direct session for $($CMConfig.domainuser.username) has been initated with CM Server named: $($CMConfig.name)" -type information
        if ($null -eq $cmsession) { throw "Issue with CM Domain User Account" }
        if ((Invoke-Pester -tagfilter "CMNETFeatures" -passthru -output none).result -ne "Passed") {
            Invoke-Command -session $cmsession -ScriptBlock { Add-WindowsFeature -Name NET-Framework-Features, NET-Framework-Core -Source "C:\data" } | Out-Null
            write-logentry -message ".Net 3.5 enabled on $($CMConfig.name)" -type information
        }
        #invoke-command -Session $cmsession -ScriptBlock { Restart-Computer}
        #$stop = (get-date).AddMinutes(5)
        #while ((Invoke-Command -VMName $CMConfig.name -Credential $CMConfig.domainuser { "Test" } -ErrorAction SilentlyContinue) -ne "Test" -and $stop -ne (get-date)) { Start-Sleep -Seconds 5 }
        if ((Invoke-Pester -tagfilter "CMFeatures" -passthru -output none).result -ne "Passed") {
            invoke-command -session $cmsession -scriptblock { $feature = @('BITS', 'BITSExtensions-Upload', 'LightweightServer', 'IIS-WebServerRole', 'IIS-WebServer', 'IIS-CommonHttpFeatures', 'IIS-DefaultDocument', 'IIS-DirectoryBrowsing', 'IIS-HttpErrors', 'IIS-StaticContent', 'IIS-HttpRedirect', 'IIS-ApplicationDevelopment', 'IIS-NetFxExtensibility', 'IIS-NetFxExtensibility45', 'IIS-ASP', 'IIS-ASPNET', 'IIS-ASPNET45', 'IIS-CGI', 'IIS-ISAPIExtensions', 'IIS-ISAPIFilter', 'IIS-HealthAndDiagnostics', 'IIS-HttpLogging', 'IIS-CustomLogging', 'IIS-LoggingLibraries', 'IIS-BasicAuthentication', 'IIS-IPSecurity', 'IIS-URLAuthorization', 'IIS-WindowsAuthentication', 'IIS-WebServerManagementTools', 'IIS-ManagementConsole', 'IIS-IIS6ManagementCompatibility', 'IIS-Metabase', 'IIS-LegacySnapIn', 'IIS-LegacyScripts', 'IIS-WMICompatibility', 'IIS-ManagementScriptingTools', 'IIS-ManagementService', 'MSRDC-Infrastructure', 'ActiveDirectory-PowerShell', 'IIS-RequestMonitor', 'IIS-HttpTracing', 'IIS-Performance', 'IIS-HttpCompressionStatic', 'IIS-Security', 'IIS-RequestFiltering');
                $feature | ForEach-Object { dism /online /quiet /enable-feature /FeatureName:$_ /all }
            }
            write-logentry -message "Windows Features enabled on $($CMConfig.name)" -type information
        }
        if ((Invoke-Pester -tagfilter "CMSQLInst" -passthru -output none).result -ne "Passed") {
            write-logentry -message "Start SQL Install on $($CMConfig.name)" -type information
            new-CMSQLInstance -cmname $CMConfig.name -cmsession $cmsession -SQLISO $CMConfig.SQLISO -domainnetbios $CMConfig.domainnetbios -admpwd $cmconfig.admpwd
        }
        if ((Invoke-Pester -tagfilter "CMADK" -passthru -output none).result -ne "Passed") {
            write-logentry -message "ADK is installing on $($CMConfig.name)" -type information
            Invoke-Command -Session $cmsession -ScriptBlock { Start-Process -FilePath "c:\data\adk\adksetup.exe" -Wait -ArgumentList " /Features OptionId.DeploymentTools OptionId.WindowsPreinstallationEnvironment OptionId.ImagingAndConfigurationDesigner OptionId.UserStateMigrationTool /norestart /quiet /ceip off" }
            write-logentry -message "ADK is installed on $($CMConfig.name)" -type information
        }
        if ($CMConfig.CMServerType -eq "CAS") {
            invoke-command -Session $cmsession -ScriptBlock { new-netfirewallrule -DisplayName "CAS Inbound" -Action Allow -Profile Any -Enabled true -Direction Inbound -Protocol TCP -LocalPort 1433, 4022 }
        }
        if ((Invoke-Pester -tagfilter "CMInstalled" -passthru -output none).result -ne "Passed") {
            if ($CMConfig.CMServerType -eq "CASPRI") {
                new-CMInstance -CMServerType $CMConfig.CMServerType -cmsession $cmsession -cmname $CMConfig.name -cmsitecode $cmconfig.cmsitecode -domainfqdn $CMConfig.domainFQDN -ver $CMConfig.SCCMVer -ipsub $ipsubnet -domainnetbios $CMConfig.domainnetbios -CASIPAddress $CMConfig.CASIPAddress
            }
            else {
                new-CMInstance -CMServerType $CMConfig.CMServerType -cmsession $cmsession -cmname $CMConfig.name -cmsitecode $cmconfig.cmsitecode -domainfqdn $CMConfig.domainFQDN -ver $CMConfig.SCCMVer -ipsub $ipsubnet -domainnetbios $CMConfig.domainnetbios #-cas:($cas.IsPresent) -pri:($pri.ispresent) -casservername $casservername    
            }
            
        }
        Invoke-Command -Session $cmsession -ScriptBlock { Set-ItemProperty -path HKLM:\SOFTWARE\Microsoft\ServerManager -name DoNotOpenServerManagerAtLogon -Type DWord -value "1" -Force }
        Invoke-Command -Session $cmsession -ScriptBlock { New-NetFirewallRule -DisplayName "SQL1433" -Direction Inbound -Protocol TCP -Action Allow -LocalPort 1433 -Profile any }
        Invoke-Command -Session $cmsession -ScriptBlock { Set-ExecutionPolicy Bypass -Scope Process -Force 
            Invoke-Expression ((New-Object System.Net.WebClient).DownloadString('https://chocolatey.org/install.ps1'))
            choco install git.install -y -f -x --no-progress -r
            choco install vscode-insiders -y -f -x --no-progress -r
            choco install sql-server-management-studio -y -f -x --no-progress -r
        }
        #TODO: still need to work on checking to see if there is an update available
        write-logentry -message "Checking for updates from Microsoft for SCCM, this might take some time depending upon your internet" -type information
        Invoke-Command -Session $cmsession -ScriptBlock { param($sitecode) 
            Get-Service SMS_EXECUTIVE | Restart-Service
            start-sleep -seconds 120
            $update = $null
            $update = Get-WmiObject -Namespace "root\sms\site_$sitecode" -Class sms_cm_updatepackages -ErrorAction SilentlyContinue
            if($null -eq $update){
                Start-Sleep -Seconds 120
                $update = Get-WmiObject -Namespace "root\sms\site_$sitecode" -Class sms_cm_updatepackages -ErrorAction SilentlyContinue
            }
            if (!($update.PackageExistsInToBeDownloadedList()).PackageExists) {
                while (!(Get-WmiObject -Namespace "root\sms\site_$sitecode" -Query "select * from sms_cm_updatepackages where State = 262146")) { "downloading"; Start-Sleep -Seconds 60 }
                $update.InitiateUpgrade($update.PrereqFlag)
                while ((Get-WmiObject -namespace "root\sms\site_$sitecode" `
                            -Query "select substagename, IsComplete from SMS_CM_UpdatePackDetailedMonitoring where substagename = 'Updating Client folder on Site Server' and packageguid = '$($update.packageguid)'" `
                            -erroraction SilentlyContinue ).IsComplete -ne 2) { "wait"; start-sleep -Seconds 60 }
            }
            
        } -ArgumentList $CMConfig.cmsitecode
        write-logentry -message "Installation of SCCM updates have been installed" -type Information
        $cmsession | remove-PSSession
        write-logentry -message "Powershell Direct session for $($CMConfig.domainuser.username) on $($CMConfig.name) has been disposed" -type information
    }
    $CMConfig.Built = $true
    $CMConfig.save("$vmpath\config.json")
    Invoke-Pester -tagfilter "CM" -output detailed
    Write-Output "CM Server Completed: $(Get-Date)"
    write-logentry -message "SCCM Server installation has completed on $($CMConfig.name)" -type information
}