# make sure the module is loaded
if (-not (Get-Module -ListAvailable Citrix.WEMSDK -ErrorAction SilentlyContinue)) { Import-Module Citrix.WEMSDK }

# set required database variables
$database       = ""                                      # name of the WEM database to talk to
$databaseServer = ""                                      # SQL servername (user 'servername\instancename' if using named instances)

# set variables used by the functions
$configname     = "POSH 2009"                             # New WEM Config (Site) name

$printServer    = "<servername>"                          # used for Printer mappings
$fileServer     = "<servername>"                          # used for Network Drive mappings

$printer1       = "\\$($printServer)\printer1"            # used for Printer Mapping 1
$printer2       = "\\$($printServer)\printer2"            # used for Printer Mapping 1
$printer3       = "\\$($printServer)\printer3"            # used for Printer Mapping 1

$share1         = "\\$($fileServer)\share1"               # used for DriveShare 1
$share2         = "\\$($fileServer)\share2"               # used for DriveShare 2
$share3         = "\\$($fileServer)\home"                 # used for DriveShare 3 -> HomeDrive
$share4         = "\\$($fileServer)\test"                 # used for DriveShare 4 -> Test Share which gets deleted

# these only work if the ActiveDirectory Module is present
$SID1           = (Get-ADUser "<user1>").SID.ToString()   # used for ADObjects creation and assignment tests
$SID2           = (Get-ADUser "<user2>").SID.ToString()   # used for ADObjects creation and administrator tests
$SID3           = (Get-ADGroup "<group1>").SID.ToString() # used for ADObjects creation and to modify assignments
$SID4           = (Get-ADGroup "<group2>").SID.ToString() # used for ADObjects tests
$SID5           = (Get-ADGroup "<group3>").SID.ToString() # used for ADObjects tests and administrator tests

$AgentOU        = (Get-ADOrganizationalUnit "OU=<ou name>,DC=<dc name>,DC=<dc name>").ObjectGUID.Guid
$AgentComputer  = (Get-ADComputer "<computer1>").SID

$gpotest1path   = "<path to>\{<gpoguid>}"
$gpotest2path   = "<path to>\gpotest\{<gpoguid>}"

# set up the database connection
$db             = New-WEMDatabaseConnection -Server "$($databaseServer)" -Database "$($database)" -Verbose
                  Get-WEMDatabaseVersion -Connection $db -Verbose

#region WEMConfiguration
# New-WEMConfiguration
$conf = New-WEMConfiguration -Connection $db -Verbose -Name "$($configname)"
New-WEMConfiguration -Connection $db -Verbose -Name "POSH Test"

# Get-WEMConfiguration
Get-WEMConfiguration -Connection $db -Verbose | Format-Table
$conf = Get-WEMConfiguration -Connection $db -Verbose -Name "$($configname)"
$conf | Format-Table

# Set-WEMConfiguration
Get-WEMConfiguration -Connection $db -Verbose -IdSite $conf.IdSite | Set-WEMConfiguration -Connection $db -Verbose -Description "Test Description"
Get-WEMConfiguration -Connection $db -Verbose -Name "$($configname)" | Set-WEMConfiguration -Connection $db -Verbose -Name "New Name" -Description "Set-WEMConfiguration"
Set-WEMConfiguration -Connection $db -Verbose -IdSite $conf.IdSite -Name "$($configname)" -Description "Set-WEMConfiguration"

# Remove-WEMConfiguration
Get-WEMConfiguration -Connection $db -Verbose -Name "Posh Test" | Remove-WEMConfiguration -Connection $db -Verbose

#endregion

#region WEMActions

#region WEMApplication
$conf = Get-WEMConfiguration -Connection $db -Verbose -Name "$($configname)"

# New-WEMApplication
$conf | New-WEMApplication -Connection $db -Verbose -Name "POSH Notepad" -TargetPath "C:\Windows\notepad.exe"
$conf | New-WEMApplication -Connection $db -Verbose -Name "POSH Explorer" -TargetPath "C:\Windows\explorer.exe"
$conf | New-WEMApplication -Connection $db -Verbose -Name "POSH Google" -TargetPath "https://www.google.com" -Type "URL"
$conf | New-WEMApplication -Connection $db -Verbose -Name "POSH Update Log" -TargetPath "C:\Windows\logs\DISM\dism.log" -Type "File / Folder"
$conf | New-WEMApplication -Connection $db -Verbose -Name "POSH Test" -TargetPath "C:\Windows\explorer.exe"

# Get-WEMApplication
# $conf | Get-WEMAction -Connection $db -Verbose -Category "Application" | Format-Table
$allApps = $conf | Get-WEMApplication -Connection $db -Verbose
$appLog = $conf | Get-WEMApp -Connection $db -Verbose -Name "*log"

$allApps | Select-Object IdSite, IdAction, Name, Description

# Set-WEMApplication
$allApps | ForEach-Object { Set-WEMApplication -Connection $db -Verbose -IdAction $_.IdAction -Description "Set-WEMApplication" -SelfHealingEnabled $true }
Set-WEMApplication -Connection $db -Verbose -IdAction $appLog.IdAction -StartMenuTarget "Start Menu\Programs\Logs" -SelfHealingEnabled $false

# Remove-WEMAction (Application)
Get-WEMApplication -Connection $db -Verbose -IdSite $conf.IdSite -Name "posh test" | Remove-WEMAction -Connection $db -Verbose -Category "Application"
$conf | New-WEMApplication -Connection $db -Verbose -Name "POSH Test" -TargetPath "C:\Windows\explorer.exe"
Remove-WEMApplication -Connection $db -Verbose -IdAction (Get-WEMAction -Connection $db -Verbose -Name "POSH Test").IdAction

$allApps = $conf | Get-WEMApplication -Connection $db -Verbose
#endregion

#region WEMPrinter
$conf = Get-WEMConfiguration -Connection $db -Verbose -Name "$($configname)"

# New-WEMPrinter
$conf | New-WEMPrinter -Connection $db -Verbose -Name "POSH Printer 1" -TargetPath "$($printer1)"
$conf | New-WEMPrinter -Connection $db -Verbose -Name "POSH Printer 2" -TargetPath "$($printer2)"
$conf | New-WEMPrinter -Connection $db -Verbose -Name "POSH Test" -TargetPath "$($printer3)"

# Get-WEMPrinter
# $conf | Get-WEMAction -Connection $db -Verbose -Category "Printer" | Format-Table
$allPrinters = $conf | Get-WEMPrinter -Connection $db -Verbose
$printerTest = $conf | Get-WEMPrinter -Connection $db -Verbose -Name "*test"

$allPrinters | Select-Object IdSite, IdAction, Name, Description

# Set-WEMPrinters
$allPrinters | ForEach-Object { Set-WEMPrinter -Connection $db -Verbose -IdAction $_.IdAction -Description "Set-WEMPrinter" -SelfHealingEnabled $true }
Set-WEMPrinter -Connection $db -Verbose -IdAction $printerTest.IdAction -State "Disabled"

# Remove-WEMAction (Printer)
Get-WEMPrinter -Connection $db -Verbose -IdSite $conf.IdSite -Name "posh test" | Remove-WEMAction -Connection $db -Verbose -Category "Printer"

$allPrinters = $conf | Get-WEMPrinter -Connection $db -Verbose

#endregion

#region WEMNetworkDrive
$conf = Get-WEMConfiguration -Connection $db -Verbose -Name "$($configname)"

# New-WEMNetworkDrive
$conf | New-WEMNetworkDrive -Connection $db -Verbose -Name "POSH Network Drive 1" -TargetPath "$($share1)"
$conf | New-WEMNetworkDrive -Connection $db -Verbose -Name "POSH Network Drive 2" -TargetPath "$($share2)"
$conf | New-WEMNetworkDrive -Connection $db -Verbose -Name "POSH Home Drive" -TargetPath "$($share3)" -SetAsHomeDriveEnabled $true
$conf | New-WEMNetworkDrive -Connection $db -Verbose -Name "POSH Test" -TargetPath "$($share4)"

# Get-WEMNetworkDrive
# $conf | Get-WEMAction -Connection $db -Verbose -Category "Network Drive" | Format-Table
$allDrives = $conf | Get-WEMNetworkDrive -Connection $db -Verbose
$homeDrive = $conf | Get-WEMNetDrive -Connection $db -Verbose | Where-Object { $_.SetAsHomeDriveEnabled }
$driveTest = $conf | Get-WEMNetworkDrive -Connection $db -Verbose -Name "*test"

$allDrives | Select-Object IdSite, IdAction, Name, Description

# Set-WEMNetworkDrive
$allDrives | ForEach-Object { Set-WEMNetworkDrive -Connection $db -Verbose -IdAction $_.IdAction -Description "Set-WEMNetworkDrive" -DisplayName $_.Name -SelfHealingEnabled $true }
Set-WEMNetworkDrive -Connection $db -Verbose -IdAction $homeDrive.IdAction -TargetPath "$($share3)\##username##"
Set-WEMNetworkDrive -Connection $db -Verbose -IdAction $driveTest.IdAction -State "Disabled"

# Remove-WEMAction (Network Drive)
Get-WEMNetworkDrive -Connection $db -Verbose -IdSite $conf.IdSite -Name "posh test" | Remove-WEMAction -Connection $db -Verbose -Category "Network Drive"

$allDrives = $conf | Get-WEMNetworkDrive -Connection $db -Verbose

#endregion

#region WEMVirtualDrive
$conf = Get-WEMConfiguration -Connection $db -Verbose -Name "$($configname)"

# New-WEMVirtualDrive
$conf | New-WEMVirtualDrive -Connection $db -Verbose -Name "POSH Virtual Drive 1" -TargetPath "D:\vdisks\posh1folder"
$conf | New-WEMVirtualDrive -Connection $db -Verbose -Name "POSH Virtual Drive 2" -TargetPath "D:\vdisks\posh2folder"
$conf | New-WEMVirtualDrive -Connection $db -Verbose -Name "POSH Virtual Home Drive" -TargetPath "D:\vdisks\##username##" -SetAsHomeDriveEnabled $true
$conf | New-WEMVirtualDrive -Connection $db -Verbose -Name "POSH Test" -TargetPath "D:\vdisks\test"

# Get-WEMVirtualDrive
# $conf | Get-WEMAction -Connection $db -Verbose -Category "Virtual Drive" | Format-Table
$allVDrives = $conf | Get-WEMVirtualDrive -Connection $db -Verbose
$homeDrive = $conf | Get-WEMVirtualDrive -Connection $db -Verbose | Where-Object { $_.SetAsHomeDriveEnabled }
$driveTest = $conf | Get-WEMVirtualDrive -Connection $db -Verbose -Name "*test"

$allVDrives | Select-Object IdSite, IdAction, Name, Description

# Set-WEMVirtualDrive
$allVDrives | ForEach-Object { Set-WEMVirtualDrive -Connection $db -Verbose -IdAction $_.IdAction -Description "Set-WEMVirtualDrive" }
Set-WEMVirtualDrive -Connection $db -Verbose -IdAction $homeDrive.IdAction -TargetPath "D:\home\##username##"
Set-WEMVirtualDrive -Connection $db -Verbose -IdAction $driveTest.IdAction -State "Disabled"

# Remove-WEMAction (Virtual Drive)
Get-WEMVirtualDrive -Connection $db -Verbose -IdSite $conf.IdSite -Name "posh test" | Remove-WEMAction -Connection $db -Verbose -Category "Virtual Drive"

$allVDrives = $conf | Get-WEMVirtualDrive -Connection $db -Verbose

#endregion

#region WEMRegistryEntry
$conf = Get-WEMConfiguration -Connection $db -Verbose -Name "$($configname)"

# New-WEMRegistryEntry
$conf | New-WEMRegistryEntry -Connection $db -Verbose -Name "POSH Registry Entry 1" -TargetPath "Citrix.WEMSDK\POSH" -TargetName "REG_SZ test" -TargetType "REG_SZ" -TargetValue "This is a string value"
$conf | New-WEMRegistryEntry -Connection $db -Verbose -Name "POSH Registry Entry 2" -TargetPath "Citrix.WEMSDK\POSH" -TargetName "REG_DWORD test" -TargetType "REG_DWORD" -TargetValue "49152"
$conf | New-WEMRegistryEntry -Connection $db -Verbose -Name "POSH Registry Entry 3" -TargetPath "Citrix.WEMSDK\POSH" -TargetName "REG_QWORD test" -TargetType "REG_QDWORD" -TargetValue "00,00,0d,00,00,00,00,00"
$conf | New-WEMRegistryEntry -Connection $db -Verbose -Name "POSH Test" -TargetPath "Citrix.WEMSDK\POSH\Test" -TargetName "Test" -TargetType "REG_SZ" -TargetValue ""

# Get-WEMRegistryEntry
# $conf | Get-WEMAction -Connection $db -Verbose -Category "Registry Value" | Format-Table
$allRegistryEntries = $conf | Get-WEMRegistryEntry -Connection $db -Verbose
$registryEntryTest = $conf | Get-WEMRegistryEntry -Connection $db -Verbose -Name "*test"

$allRegistryEntries | Select-Object IdSite, IdAction, Name, Description

# Set-WEMRegistryEntry
$allRegistryEntries | ForEach-Object { Set-WEMRegistryEntry -Connection $db -Verbose -IdAction $_.IdAction -Description "Set-WEMRegistryEntry" }
Set-WEMRegistryEntry -Connection $db -Verbose -IdAction $registryEntryTest.IdAction -TargetName "Test updated" -TargetType "REG_EXPAND_SZ" -TargetValue "Test value" -RunOnce $false
Set-WEMRegistryEntry -Connection $db -Verbose -IdAction $registryEntryTest.IdAction -State "Disabled"

# Remove-WEMAction (Registry Entry)
Get-WEMRegistryEntry -Connection $db -Verbose -IdSite $conf.IdSite -Name "posh test" | Remove-WEMAction -Connection $db -Verbose -Category "Registry Value"

$allRegistryEntries = $conf | Get-WEMRegistryEntry -Connection $db -Verbose

#endregion

#region WEMEnvironmentVariable
$conf = Get-WEMConfiguration -Connection $db -Verbose -Name "$($configname)"

# New-WEMEnvironmentVariable
$conf | New-WEMEnvironmentVariable -Connection $db -Verbose -Name "POSH Environment Variable 1" -VariableName "POSHModule" -VariableValue "Citrix.WEMSDK"
$conf | New-WEMEnvironmentVariable -Connection $db -Verbose -Name "POSH Test" -VariableName "POSHTest"
$conf | New-WEMEnvironmentVariable -Connection $db -Verbose -Name "POSH Test 2" -VariableName "POSHTest 2"

# Get-WEMEnvironmentVariable
# $conf | Get-WEMAction -Connection $db -Verbose -Category "Environment Variable" | Format-Table
$allEnvironmentVariables = $conf | Get-WEMEnvironmentVariable -Connection $db -Verbose
$environmentVariableTest = $conf | Get-WEMEnvironmentVariable -Connection $db -Verbose -Name "*test"

$allEnvironmentVariables | Select-Object IdSite, IdAction, Name, Description

# Set-WEMEnvironmentVariable
$i=1 ; $allEnvironmentVariables | ForEach-Object { Set-WEMEnvironmentVariable -Connection $db -Verbose -IdAction $_.IdAction -Description "Set-WEMEnvironmentVariable" -ExecutionOrder $i; $i++ }
Set-WEMEnvironmentVariable -Connection $db -Verbose -IdAction $environmentVariableTest.IdAction -VariableName "POSHTested" -VariableValue "Updated"
Set-WEMEnvironmentVariable -Connection $db -Verbose -IdAction $environmentVariableTest.IdAction -State "Disabled"

# Remove-WEMAction (Environment Variable)
Get-WEMEnvironmentVariable -Connection $db -Verbose -IdSite $conf.IdSite -Name "posh test" | Remove-WEMAction -Connection $db -Verbose -Category "Environment Variable"
Get-WEMEnvironmentVariable -Connection $db -Verbose -IdSite $conf.IdSite -Name "posh test 2" | Remove-WEMEnvironmentVariable -Connection $db -Verbose

$allEnvironmentVariables = $conf | Get-WEMEnvironmentVariable -Connection $db -Verbose

#endregion

#region WEMPort
$conf = Get-WEMConfiguration -Connection $db -Verbose -Name "$($configname)"

# New-WEMPort
$conf | New-WEMPort -Connection $db -Verbose -Name "POSH Port COM1:" -PortName "COM1:" -TargetPath "Unknown COM port"
$conf | New-WEMPort -Connection $db -Verbose -Name "POSH Port LPT4:" -PortName "LPT4:" -TargetPath "Unknown LPT port"
$conf | New-WEMPort -Connection $db -Verbose -Name "POSH Test 1" -PortName "COM9:" -TargetPath "\\.\COM9"
$conf | New-WEMPort -Connection $db -Verbose -Name "POSH Test 2" -PortName "LPT9:" -TargetPath "Unknown"

# Get-WEMPort
# $conf | Get-WEMAction -Connection $db -Verbose -Category "Port" | Format-Table
$allPorts = $conf | Get-WEMPort -Connection $db -Verbose
$portTest = $conf | Get-WEMPort -Connection $db -Verbose -Name "*test 1"

$allPorts | Select-Object IdSite, IdAction, Name, Description

# Set-WEMPort
$allPorts | ForEach-Object { Set-WEMPort -Connection $db -Verbose -IdAction $_.IdAction -Description "Set-WEMPort" }
Set-WEMPort -Connection $db -Verbose -IdAction $portTest.IdAction -Name "POSH Test 1 - Update" -TargetPath "Updated"
Set-WEMPort -Connection $db -Verbose -IdAction $portTest.IdAction -State "Disabled"

# Remove-WEMAction (Environment Variable)
Get-WEMPort -Connection $db -Verbose -IdSite $conf.IdSite -Name "posh test 1*" | Remove-WEMAction -Connection $db -Verbose -Category "Port"
Get-WEMPort -Connection $db -Verbose -IdSite $conf.IdSite -Name "posh test 2" | Remove-WEMPort -Connection $db -Verbose

$allPorts = $conf | Get-WEMPort -Connection $db -Verbose

#endregion

#region WEMIniFileOperation
$conf = Get-WEMConfiguration -Connection $db -Verbose -Name "$($configname)"

# New-WEMIniFileOperation
$conf | New-WEMIniFileOperation -Connection $db -Verbose -Name "POSH Ini File Op 1" -TargetPath "C:\Windows\Citrix.WEMSDK.ini" -TargetSectionName "Citrix.WEMSDK" -TargetValueName "init" -TargetValue "None"
$conf | New-WEMIniFileOperation -Connection $db -Verbose -Name "POSH Ini File Op 2" -TargetPath "C:\Windows\Citrix.WEMSDK.ini" -TargetSectionName "Citrix.WEMSDK" -TargetValueName "deinit"
$conf | New-WEMIniFileOperation -Connection $db -Verbose -Name "POSH Test 1" -TargetPath "C:\Windows\Citrix.WEMSDK.ini" -TargetSectionName "Test" -TargetValueName "1" -TargetValue "A"
$conf | New-WEMIniFileOperation -Connection $db -Verbose -Name "POSH Test 2" -TargetPath "C:\Windows\Citrix.WEMSDK.ini" -TargetSectionName "Test" -TargetValueName "2" -TargetValue "B"

# Get-WEMIniFileOperation
# $conf | Get-WEMAction -Connection $db -Verbose -Category "Ini File Operation" | Format-Table
$allIniFileOps = $conf | Get-WEMIniFileOperation -Connection $db -Verbose
$iniFileOpTest = $conf | Get-WEMIniFileOperation -Connection $db -Verbose -Name "*test 1"

$allIniFileOps | Select-Object IdSite, IdAction, Name, Description

# Set-WEMIniFileOperation
$allIniFileOps | ForEach-Object { Set-WEMIniFileOperation -Connection $db -Verbose -IdAction $_.IdAction -Description "Set-WEMIniFileOperation" }
Set-WEMIniFileOperation -Connection $db -Verbose -IdAction $iniFileOpTest.IdAction -Name "POSH Test 1 - Update" -TargetValue "Updated"
Set-WEMIniFileOperation -Connection $db -Verbose -IdAction $iniFileOpTest.IdAction -State "Disabled" -RunOnce $false

# Remove-WEMAction (Ini File Operation)
Get-WEMIniFileOperation -Connection $db -Verbose -IdSite $conf.IdSite -Name "posh test 1*" | Remove-WEMAction -Connection $db -Verbose -Category "Ini File Operation"
Get-WEMIniFilesOp -Connection $db -Verbose -IdSite $conf.IdSite -Name "posh test 2" | Remove-WEMIniFileOperation -Connection $db -Verbose

$allIniFileOps = $conf | Get-WEMIniFileOperation -Connection $db -Verbose

#endregion

#region WEMExternalTask
$conf = Get-WEMConfiguration -Connection $db -Verbose -Name "$($configname)"

# New-WEMExternalTask
$conf | New-WEMExternalTask -Connection $db -Verbose -Name "POSH External Task 1" -TargetPath "C:\Windows\SetScreensaver.exe" -TargetArguments "-Seconds 600" -RunHidden $true
$conf | New-WEMExternalTask -Connection $db -Verbose -Name "POSH External Task 2" -TargetPath "C:\Windows\Notepad.exe" -TargetArguments "'c:\temp\new file.txt'" -WaitForFinish $false -TimeOut 120 -ExecuteOnlyAtLogon $true
$conf | New-WEMExternalTask -Connection $db -Verbose -Name "POSH Test 1" -TargetPath "C:\Windows\System32\explorer.exe" -TargetArguments "C:"
$conf | New-WEMExternalTask -Connection $db -Verbose -Name "POSH Test 2" -TargetPath "reg.exe"

# Get-WEMExternalTask
# $conf | Get-WEMAction -Connection $db -Verbose -Category "External Task" | Format-Table
$allExternalTasks = $conf | Get-WEMExternalTask -Connection $db -Verbose
$externalTaskTest = $conf | Get-WEMExternalTask -Connection $db -Verbose -Name "*test 1"

$allExternalTasks | Select-Object IdSite, IdAction, Name, Description

# Set-WEMExternalTask
$allExternalTasks | ForEach-Object { Set-WEMExternalTask -Connection $db -Verbose -IdAction $_.IdAction -Description "Set-WEMExternalTask" }
Set-WEMExternalTask -Connection $db -Verbose -IdAction $externalTaskTest.IdAction -Name "POSH Test 1 - Update" -TargetPath "dir"
Set-WEMExternalTask -Connection $db -Verbose -IdAction $externalTaskTest.IdAction -State "Disabled" -RunOnce $false -ExecuteOnlyAtLogon $true -ExecutionOrder 54

# Remove-WEMAction (External Task)
Get-WEMExtTask -Connection $db -Verbose -IdSite $conf.IdSite -Name "posh test 1*" | Remove-WEMAction -Connection $db -Verbose -Category "External Task"
Get-WEMExternalTask -Connection $db -Verbose -IdSite $conf.IdSite -Name "*test 2" | Remove-WEMExternalTask -Connection $db -Verbose

$allExternalTasks = $conf | Get-WEMExternalTask -Connection $db -Verbose

#endregion

#region WEMFileSystemOperation
$conf = Get-WEMConfiguration -Connection $db -Verbose -Name "$($configname)"

# New-WEMFileSystemOperation
$conf | New-WEMFileSystemOperation -Connection $db -Verbose -Name "POSH File System Operation 1" -SourcePath "$($share1)\file.ini" -TargetPath "C:\Temp\file.tst"
$conf | New-WEMFileSystemOperation -Connection $db -Verbose -Name "POSH File System Operation 2" -SourcePath "C:\Temp" -ActionType "Create Directory"
$conf | New-WEMFileSystemOperation -Connection $db -Verbose -Name "POSH Test 1" -SourcePath "\\server\share\malware.exe" -TargetPath "C:\Windows\System32\explorer.exe" -RunOnce $false -ExecutionOrder 69
$conf | New-WEMFileSystemOperation -Connection $db -Verbose -Name "POSH Test 2" -SourcePath "\\server\share\malware.exe" -TargetPath "C:\Windows\System32\notepad.exe" -TargetOverwrite $false

# Get-WEMFileSystemOperation
# $conf | Get-WEMAction -Connection $db -Verbose -Category "File System Operation" | Format-Table
$allFileSystemOps = $conf | Get-WEMFileSystemOperation -Connection $db -Verbose
$fileSystemOpsTest = $conf | Get-WEMFileSystemOp -Connection $db -Verbose -Name "*test 1"

$allFileSystemOps | Select-Object IdSite, IdAction, Name, Description

# Set-WEMFileSystemOperation
$allFileSystemOps | ForEach-Object { Set-WEMFileSystemOperation -Connection $db -Verbose -IdAction $_.IdAction -Description "Set-WEMFileSystemOperation" }
Set-WEMFileSystemOperation -Connection $db -Verbose -IdAction $fileSystemOpsTest.IdAction -Name "POSH Test 1 - Update" -TargetPath "C:\Windows\screensaver.exe"
Set-WEMFileSystemOperation -Connection $db -Verbose -IdAction $fileSystemOpsTest.IdAction -State "Disabled" -RunOnce $True -ExecutionOrder 666

# Remove-WEMAction (File System Operation)
Get-WEMFileSystemOperation -Connection $db -Verbose -IdSite $conf.IdSite -Name "posh test 1*" | Remove-WEMAction -Connection $db -Verbose -Category "File System Operation"
Get-WEMFileSystemOperation -Connection $db -Verbose -IdSite $conf.IdSite -Name "*test 2" | Remove-WEMFileSystemOperation -Connection $db -Verbose

$allFileSystemOps = $conf | Get-WEMFileSystemOperation -Connection $db -Verbose

#endregion

#region WEMUserDSN
$conf = Get-WEMConfiguration -Connection $db -Verbose -Name "$($configname)"

# New-WEMUserDSN
$conf | New-WEMUserDSN -Connection $db -Verbose -Name "POSH User DSN 1" -TargetName "POSH DSN 1" -TargetDriverName "SQL Server" -TargetServer "ITWSQL" -TargetDatabaseName "CitrixWEM" -RunOnce $false
$conf | New-WEMUserDSN -Connection $db -Verbose -Name "POSH User DSN 2" -TargetName "POSH DSN 2" -TargetDriverName "SQL Server" -TargetServer "ITWSQL" -TargetDatabaseName "ADFS" -RunOnce $true
$conf | New-WEMUserDSN -Connection $db -Verbose -Name "POSH Test 1" -TargetName "POSH Test" -TargetDriverName "SQL Server" -TargetServer "ITWTEMP" -TargetDatabaseName "TEMPDB" -RunOnce $true
$conf | New-WEMUserDSN -Connection $db -Verbose -Name "POSH Test 2" -TargetName "POSH Test 2" -TargetDriverName "SQL Server" -TargetServer "ITWTEMP" -TargetDatabaseName "TEMPDB" -RunOnce $true

# Get-WEMUserDSN
# $conf | Get-WEMAction -Connection $db -Verbose -Category "User DSN" | Format-Table
$allUserDSNs = $conf | Get-WEMUserDSN -Connection $db -Verbose
$userDSNTest = $conf | Get-WEMUserDSN -Connection $db -Verbose -Name "*test 1"

$allUserDSNs | Select-Object IdSite, IdAction, Name, Description

# Set-WEMUserDSN
$allUserDSNs | ForEach-Object { Set-WEMUserDSN -Connection $db -Verbose -IdAction $_.IdAction -Description "Set-WEMUserDSN" }
Set-WEMUserDSN -Connection $db -Verbose -IdAction $userDSNTest.IdAction -Name "POSH Test 1 - Update" -TargetServer "ITWSQL" -TargetDatabaseName "TheDB" -RunOnce $false
Set-WEMUserDSN -Connection $db -Verbose -IdAction $userDSNTest.IdAction -State "Disabled"

# Remove-WEMAction (User DSN)
Get-WEMUserDSN -Connection $db -Verbose -IdSite $conf.IdSite -Name "posh test 1*" | Remove-WEMAction -Connection $db -Verbose -Category "User DSN"
Get-WEMUserDSN -Connection $db -Verbose -IdSite $conf.IdSite -Name "posh test 2" | Remove-WEMUserDSN -Connection $db -Verbose

$allUserDSNs = $conf | Get-WEMUserDSN -Connection $db -Verbose

#endregion

#region WEMFileAssociation
$conf = Get-WEMConfiguration -Connection $db -Verbose -Name "$($configname)"

# New-WEMFileAssociation
$conf | New-WEMFileAssociation -Connection $db -Verbose -Name "POSH File Association 1" -FileExtension "txt" -ProgramId "666" -Action "open" -IsDefault $true -TargetPath "c:\notepad++\notepad++.exe" -TargetCommand "%1"
$conf | New-WEMFileAssociation -Connection $db -Verbose -Name "POSH File Association 2" -FileExtension "log" -ProgramId "789" -Action "edit" -IsDefault $false -TargetPath "c:\notepad++\notepad++.exe" -TargetCommand "%1"
$conf | New-WEMFileAssociation -Connection $db -Verbose -Name "POSH Test 1" -FileExtension "nfo" -ProgramId "123" -Action "print" -TargetPath "c:\notepad++\notepad++.exe" -TargetCommand "%1"
$conf | New-WEMFileAssociation -Connection $db -Verbose -Name "POSH Test 2" -FileExtension "csv" -ProgramId "450" -Action "open" -TargetPath "c:\notepad++\notepad++.exe" -TargetCommand "%1"

# Get-WEMFileAssociation
# $conf | Get-WEMAction -Connection $db -Verbose -Category "File Association" | Format-Table
$allFileAssocs = $conf | Get-WEMFileAssociation -Connection $db -Verbose
$fileAssocTest = $conf | Get-WEMFileAssoc -Connection $db -Verbose -Name "*test 1"

$allFileAssocs | Select-Object IdSite, IdAction, Name, Description

# Set-WEMFileAssociation
$allFileAssocs | ForEach-Object { Set-WEMFileAssociation -Connection $db -Verbose -IdAction $_.IdAction -Description "Set-WEMFileAssociation" }
Set-WEMFileAssociation -Connection $db -Verbose -IdAction $fileAssocTest.IdAction -Name "POSH Test 1 - Update" -Action "open" -IsDefault $true -TargetOverwrite $true -RunOnce $true 
Set-WEMFileAssoc -Connection $db -Verbose -IdAction $fileAssocTest.IdAction -State "Disabled"

# Remove-WEMAction (File Association)
Get-WEMFileAssociation -Connection $db -Verbose -IdSite $conf.IdSite -Name "posh test 1*" | Remove-WEMAction -Connection $db -Verbose -Category "File Association"
Get-WEMFileAssociation -Connection $db -Verbose -IdSite $conf.IdSite -Name "posh test 2" | Remove-WEMFileAssociation -Connection $db -Verbose

$allFileAssocs = $conf | Get-WEMFileAssociation -Connection $db -Verbose

#endregion

$allActions = $conf | Get-WEMAction -Connection $db -Verbose

#endregion

#region WEMADUserObject
$conf = Get-WEMConfiguration -Connection $db -Verbose -Name "$($configname)"

# New-WEMADUserObject
$conf | New-WEMADUserObject -Connection $db -Verbose -Name $SID1
$conf | New-WEMADUserObject -Connection $db -Verbose -Name $SID2
$conf | New-WEMADUserObject -Connection $db -Verbose -Name $SID3
# Adding Domain Admins group as test for Remove-WEMADUserObject
$conf | New-WEMADUserObject -Connection $db -Verbose -Name $SID4

# Get-WEMADUserObject
# $conf | Get-WEMADUserObject -Connection $db -Verbose | Format-Table
$allADObjects = $conf | Get-WEMADUserObject -Connection $db -Verbose
$allADObjects | Select-Object IdSite, IdADObject, Name, Type

# Set-WEMADUserObject
$allADObjects | ForEach-Object { Set-WEMADUserObject -Connection $db -Verbose -IdADObject $_.IdADObject -Description "Set-WEMADUserObject" }
Set-WEMADUserObject -Connection $db -Verbose -IdADObject (Get-WEMADUserObject -Connection $db -Verbose -Name $SID4).IdADObject -Name $SID5 -State "Disabled"

# Remove-WEMADUserObject
Remove-WEMADUserObject -Connection $db -Verbose -IdADObject (Get-WEMADUserObject -Connection $db -Verbose -Name $SID5).IdADObject

$allADObjects = $conf | Get-WEMADUserObject -Connection $db -Verbose

#endregion

#region WEMCondition
$conf = Get-WEMConfiguration -Connection $db -Verbose -Name "$($configname)"

# New-WEMCondition
$conf | New-WEMCondition -Connection $db -Verbose -Name "POSH Condition 1" -Type "Client OS" -TestResult "Windows 10"
$conf | New-WEMCondition -Connection $db -Verbose -Name "POSH Condition 2" -Type "Environment Variable Match" -TestValue "SystemRoot" -TestResult "C:\Windows"
$conf | New-WEMCondition -Connection $db -Verbose -Name "POSH Test 1" -Type "Active Directory Attribute Match" -TestValue "mail" -TestResult "arjan.mensch@it-worxx.nl"
$conf | New-WEMCondition -Connection $db -Verbose -Name "POSH Test 2" -Type "No Active Directory Group Match" -TestResult "Domain Admins"

# Get-WEMCondition
# $conf | Get-WEMCondition -Connection $db -Verbose | Format-Table
$allConditions = $conf | Get-WEMCondition -Connection $db -Verbose
$allConditions | Select-Object IdSite, IdCondition, Name, Type, TestValue, TestResult | Format-Table

# Set-WEMCondition
$allConditions | Where-Object { $_.IdCondition -gt 1 } | ForEach-Object { Set-WEMCondition -Connection $db -Verbose -IdCondition $_.IdCondition -Description "Set-WEMCondition" }
Set-WEMCondition -Connection $db -Verbose -IdCondition (Get-WEMCondition -Connection $db -Verbose -Name "POSH Test 1").IdCondition -State "Disabled"

# Remove-WEMCondition
Remove-WEMCondition -Connection $db -Verbose -IdCondition (Get-WEMCondition -Connection $db -Verbose -Name "POSH Test 1" -IdSite $conf.IdSite).IdCondition
Get-WemCondition -Connection $db -Verbose -Name "*test 2" -IdSite $conf.IdSite | Remove-WEMCondition -Connection $db -Verbose

$allConditions = $conf | Get-WEMCondition -Connection $db -Verbose

#endregion

#region WEMRule
$conf = Get-WEMConfiguration -Connection $db -Verbose -Name "$($configname)"

# New-WEMRule
$conf | New-WEMRule -Connection $db -Verbose -Name "POSH Rule 1" -Conditions (Get-WEMCondition -Connection $db -Verbose -Name "POSH Condition 1")
$conf | New-WEMRule -Connection $db -Verbose -Name "POSH Rule 2" -Conditions (Get-WEMCondition -Connection $db -Verbose -Name "POSH Condition 2")
$conf | New-WEMRule -Connection $db -Verbose -Name "POSH Rule 3" -Conditions (Get-WEMCondition -Connection $db -Verbose -Name "POSH Condition *")
$conf | New-WEMRule -Connection $db -Verbose -Name "POSH Test 1" -Conditions (Get-WEMCondition -Connection $db -Verbose -IdCondition 1)

$conf | New-WEMCondition -Connection $db -Verbose -Name "POSH Test 1" -Type "Active Directory Attribute Match" -TestValue "mail" -TestResult "arjan.mensch@it-worxx.nl"
$conf | New-WEMCondition -Connection $db -Verbose -Name "POSH Test 2" -Type "No Active Directory Group Match" -TestResult "Domain Admins"
$conf | New-WEMRule -Connection $db -Verbose -Name "POSH Test 2" -Conditions (Get-WEMCondition -Connection $db -Verbose -Name "POSH Test *")

# Get-WEMRule
# $conf | Get-WEMRule -Connection $db -Verbose | Format-Table
$allRules = $conf | Get-WEMRule -Connection $db -Verbose
$testRule = $conf | Get-WEMRule -Connection $db -Verbose -Name "POSH Test 1"
$allRules | Select-Object IdSite, IdRule, Name, Conditions | Format-Table

# Set-WEMRule
$allRules | Where-Object { $_.IdRule -gt 1 } | ForEach-Object { Set-WEMRule -Connection $db -Verbose -IdRule $_.IdRule -Description "Set-WEMRule" }
$conditionArray = $testRule.Conditions
$conditionArray += Get-WEMCondition -Connection $db -IdSite $conf.IdSite -Name "POSH Condition *" 
Set-WEMRule -Connection $db -Verbose -IdRule $testRule.IdRule -State "Disabled" -Conditions $conditionArray
$conditionArray = $conditionArray | Where-Object { $_.Name -notlike "POSH Condition 1" }
Set-WEMRule -Connection $db -Verbose -IdRule $testRule.IdRule -Conditions $conditionArray

# Remove-WEMRule
Remove-WEMRule -Connection $db -Verbose -IdRule $testRule.IdRule
Remove-WEMCondition -Connection $db -Verbose -IdCondition (Get-WEMCondition -Connection $db -Name "POSH Test 1").IdCondition
Remove-WEMCondition -Connection $db -Verbose -IdCondition (Get-WEMCondition -Connection $db -Name "POSH Test 2").IdCondition

$allRules = $conf | Get-WEMRule -Connection $db -Verbose

#endregion

#region WEMActionGroup
$conf = Get-WEMConfiguration -Connection $db -Verbose -Name "$($configname)"

# New-WEMActionGroup
$conf | New-WEMActionGroup -Connection $db -Verbose -Name "POSH Action Group 1"
$conf | New-WEMActionGroup -Connection $db -Verbose -Name "POSH Action Group 2"
$conf | New-WEMActionGroup -Connection $db -Verbose -Name "POSH Test 1"

# Get-WEMActionGroup
# $conf | Get-WEMActionGroup -Connection $db -Verbose | Format-Table
$allActionGroups = $conf | Get-WEMActionGroup -Connection $db -Verbose
$testActionGroup = $conf | Get-WEMActionGroup -Connection $db -Verbose -Name "POSH Test 1"
$allActionGroups | Format-Table

# Set-WEMActionGroup
$allActionGroups | ForEach-Object { Set-WEMActionGroup -Connection $db -Verbose -IdActionGroup $_.IdActionGroup -Description "Set-WEMActionGroup" }

$actionGroupId = (Get-WEMActionGroup -Connection $db -IdSite $conf.IdSite -Name "POSH Action Group 1").IdActionGroup
$allApps | ForEach-Object { Set-WEMActionGroup -Connection $db -Verbose -IdActionGroup $actionGroupId -AddApplication $_ -AssignmentProperties "CreateStartMenuLink", "PinToStartMenu" }
$allPrinters | ForEach-Object { Set-WEMActionGroup -Connection $db -Verbose -IdActionGroup $actionGroupId -AddPrinter $_ }
Set-WEMActionGroup -Connection $db -Verbose -IdActionGroup $actionGroupId -AddNetworkDrive $allDrives[0] -DriveLetter X
Set-WEMActionGroup -Connection $db -Verbose -IdActionGroup $testActionGroup.IdActionGroup -AddNetworkDrive $allDrives[0] -DriveLetter H

# Remove-WEMActionGroup
Remove-WEMActionGroup -Connection $db -Verbose -IdActionGroup $testActionGroup.IdActionGroup

$allActionGroups = $conf | Get-WEMActionGroup -Connection $db -Verbose

#endregion

#region WEMGroupPolicyObject
$conf = Get-WEMConfiguration -Connection $db -Verbose -Name "$($configname)"

# New-WEMGroupPolicyObject
$conf | New-WEMGroupPolicyObject -Connection $db -Verbose -Path $gpotest1path -Overwrite
$gpotest1 = $conf | New-WEMGroupPolicyObject -Connection $db -Verbose -Path $gpotest2path

# Get-WEMGroupPolicyObject
$allGPOs = $conf | Get-WEMGroupPolicyObject -Connection $db -Verbose
$gpotest2 = $conf | Get-WEMGroupPolicyObject -Connection $db -Verbose -Name $gpotest1.Name

$allGPOs | Format-Table

# Set-WEMGroupPolicyObject
$allGPOs | ForEach-Object { Set-WEMGroupPolicyObject -Connection $db -Verbose -IdObject $_.IdObject -Description "Set-WEMGroupPolicyObject" }
Set-WEMGroupPolicyObject -Connection $db -Verbose -IdObject $gpotest2.IdObject -Name "Set-WEMGroupPolicyObject"

# Remove-WEMGroupPolicyObject
Remove-WEMGroupPolicyObject -Connection $db -Verbose -IdObject $gpotest2.IdObject

$gpotest2 = $conf | New-WEMGroupPolicyObject -Connection $db -Verbose -Path $gpotest2path
$allGPOs = $conf | Get-WEMGroupPolicyObject -Connection $db -Verbose
#endregion

#region WEMAssignments

#region WEMApplicationAssignments
$conf = Get-WEMConfiguration -Connection $db -Verbose -Name "$($configname)"

# New-WEMApplicationAssignment
$adobject = (Get-WEMADUserObject -Connection $db -IdSite $conf.IdSite -Name $SID1).IdADObject
$rule = (Get-WEMRule -Connection $db -IdSite $conf.IdSite -Name "POSH Rule 1").IdRule
$allApps[0] | New-WEMApplicationAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule
$allApps[1] | New-WEMApplicationAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule -AssignmentProperties "CreateDesktopLink","AutoStart","PinToStartMenu"
$allApps[2..3] | New-WEMApplicationAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule

# Get-WEMApplicationAssignment
# $conf | Get-WEMApplicationAssignment -Connection $db -Verbose | Format-Table
$allAppAssignments = $conf | Get-WEMAssignment -Connection $db -Verbose -AssignmentType "Application"
$allAppAssignments | Format-Table

# Set-WEMApplicationAssignment
$rule = (Get-WEMRule -Connection $db -Name "Always True").IdRule
$adobject = (Get-WEMADUserObject -Connection $db -IdSite $conf.IdSite -Name $SID3).IdADObject
$allAppAssignments | Set-WEMApplicationAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule
$allAppAssignments | Set-WEMApplicationAssignment -Connection $db -Verbose -AssignmentProperties "CreateStartMenuLink", "PinToStartMenu"

# Remove-WEMApplicationAssignment
$adobject = (Get-WEMADUserObject -Connection $db -IdSite $conf.IdSite -Name $SID1).IdADObject
$rule = (Get-WEMRule -Connection $db -IdSite $conf.IdSite -Name "POSH Rule 1").IdRule
$testAssignment = $allApps[0] | New-WEMApplicationAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule
$testAssignment | Remove-WEMApplicationAssignment -Connection $db -Verbose

# $allAppAssignments = $conf | Get-WEMAssignment -Connection $db -Verbose -AssignmentType "Application"

#endregion

#region WEMPrinterAssignments
$conf = Get-WEMConfiguration -Connection $db -Verbose -Name "$($configname)"

# New-WEMPrinterAssignment
$adobject = (Get-WEMADUserObject -Connection $db -IdSite $conf.IdSite -Name $SID1).IdADObject
$rule = (Get-WEMRule -Connection $db -IdSite $conf.IdSite -Name "POSH Rule 1").IdRule
$allPrinters[0] | New-WEMPrinterAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule
$allPrinters[1] | New-WEMPrinterAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule -SetAsDefault $true

# Get-WEMPrinterAssignment
# $conf | Get-WEMPrinterAssignment -Connection $db -Verbose | Format-Table
$allPrinterAssignments = $conf | Get-WEMAssignment -Connection $db -Verbose -AssignmentType "Printer"
$allPrinterAssignments | Format-Table

# Set-WEMPrinterAssignment
$rule = (Get-WEMRule -Connection $db -Name "Always True").IdRule
$adobject = (Get-WEMADUserObject -Connection $db -IdSite $conf.IdSite -Name $SID3).IdADObject
$allPrinterAssignments | Set-WEMPrinterAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule
$allPrinterAssignments | Set-WEMPrinterAssignment -Connection $db -Verbose -SetAsDefault $false

# Remove-WEMPrinterAssignment
$adobject = (Get-WEMADUserObject -Connection $db -IdSite $conf.IdSite -Name $SID1).IdADObject
$rule = (Get-WEMRule -Connection $db -IdSite $conf.IdSite -Name "POSH Rule 1").IdRule
$testAssignment = $allPrinters[0] | New-WEMPrinterAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule
$testAssignment | Remove-WEMPrinterAssignment -Connection $db -Verbose

# $allPrinterAssignments = $conf | Get-WEMAssignment -Connection $db -Verbose -AssignmentType "Printer"

#endregion

#region WEMNetworkDrivesAssignments
$conf = Get-WEMConfiguration -Connection $db -Verbose -Name "$($configname)"

# New-WEMNetworkDriveAssignment
$adobject = (Get-WEMADUserObject -Connection $db -IdSite $conf.IdSite -Name $SID1).IdADObject
$rule = (Get-WEMRule -Connection $db -IdSite $conf.IdSite -Name "POSH Rule 1").IdRule
$allDrives[0] | New-WEMNetworkDriveAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule -DriveLetter "E"
$allDrives[1] | New-WEMNetworkDriveAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule -DriveLetter "F"
$allDrives[2] | New-WEMNetworkDriveAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule -DriveLetter "H"

# Get-WEMNetworkDriveAssignment
# $conf | Get-WEMNetworkDriveAssignment -Connection $db -Verbose | Format-Table
$allDriveAssignments = $conf | Get-WEMAssignment -Connection $db -Verbose -AssignmentType "Network Drive"
$allDriveAssignments | Format-Table

# Set-WEMNetworkDriveAssignment
$rule = (Get-WEMRule -Connection $db -Name "Always True").IdRule
$adobject = (Get-WEMADUserObject -Connection $db -IdSite $conf.IdSite -Name $SID3).IdADObject
$allDriveAssignments | Set-WEMNetworkDriveAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule
$allDriveAssignments[0] | Set-WEMNetworkDriveAssignment -Connection $db -Verbose -DriveLetter "G"
$allDriveAssignments[1] | Set-WEMNetworkDriveAssignment -Connection $db -Verbose -DriveLetter "J"

# Remove-WEMNetworkDriveAssignment
$adobject = (Get-WEMADUserObject -Connection $db -IdSite $conf.IdSite -Name $SID1).IdADObject
$rule = (Get-WEMRule -Connection $db -IdSite $conf.IdSite -Name "POSH Rule 1").IdRule
$testAssignment = $allDrives[0] | New-WEMNetworkDriveAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule -DriveLetter "G"
$testAssignment | Remove-WEMNetworkDriveAssignment -Connection $db -Verbose

# $allDriveAssignments = $conf | Get-WEMAssignment -Connection $db -Verbose -AssignmentType "Network Drive"

#endregion

#region WEMVirtualDrivesAssignments
$conf = Get-WEMConfiguration -Connection $db -Verbose -Name "$($configname)"

# New-WEMVirtualDriveAssignment
$adobject = (Get-WEMADUserObject -Connection $db -IdSite $conf.IdSite -Name $SID1).IdADObject
$rule = (Get-WEMRule -Connection $db -IdSite $conf.IdSite -Name "POSH Rule 1").IdRule
$allVDrives[0] | New-WEMVirtualDriveAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule -DriveLetter "E"
$allVDrives[1] | New-WEMVirtualDriveAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule -DriveLetter "F"
$allVDrives[2] | New-WEMvirtualDriveAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule -DriveLetter "K"

# Get-WEMVirtualDriveAssignment
# $conf | Get-WEMNetworkDriveAssignment -Connection $db -Verbose | Format-Table
$allVDriveAssignments = $conf | Get-WEMAssignment -Connection $db -Verbose -AssignmentType "Virtual Drive"
$allVDriveAssignments | Format-Table

# Set-WEMVirtualDriveAssignment
$rule = (Get-WEMRule -Connection $db -Name "Always True").IdRule
$adobject = (Get-WEMADUserObject -Connection $db -IdSite $conf.IdSite -Name $SID3).IdADObject
$allVDriveAssignments | Set-WEMVirtualDriveAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule
$allVDriveAssignments[0] | Set-WEMVirtualDriveAssignment -Connection $db -Verbose -DriveLetter "L"
$allVDriveAssignments[1] | Set-WEMVirtualDriveAssignment -Connection $db -Verbose -DriveLetter "M"

# Remove-WEMVirtualDriveAssignment
$adobject = (Get-WEMADUserObject -Connection $db -IdSite $conf.IdSite -Name $SID1).IdADObject
$rule = (Get-WEMRule -Connection $db -IdSite $conf.IdSite -Name "POSH Rule 1").IdRule
$testAssignment = $allVDrives[0] | New-WEMVirtualDriveAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule -DriveLetter "E"
$testAssignment | Remove-WEMVirtualDriveAssignment -Connection $db -Verbose

# $allVDriveAssignments = $conf | Get-WEMAssignment -Connection $db -Verbose -AssignmentType "Virtual Drive"

#endregion

#region WEMRegistryEntryAssignments
$conf = Get-WEMConfiguration -Connection $db -Verbose -Name "$($configname)"

# New-WEMRegistryEntryAssignment
$adobject = (Get-WEMADUserObject -Connection $db -IdSite $conf.IdSite -Name $SID1).IdADObject
$rule = (Get-WEMRule -Connection $db -IdSite $conf.IdSite -Name "POSH Rule 1").IdRule
$allRegistryEntries | New-WEMRegistryEntryAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule

# Get-WEMRegistryEntryAssignment
# $conf | Get-WEMRegistryEntryAssignment -Connection $db -Verbose | Format-Table
$allRegValueAssignments = $conf | Get-WEMAssignment -Connection $db -Verbose -AssignmentType "Registry Value"
$allRegValueAssignments | Format-Table

# Set-WEMRegistryEntryAssignment
$rule = (Get-WEMRule -Connection $db -Name "Always True").IdRule
$adobject = (Get-WEMADUserObject -Connection $db -IdSite $conf.IdSite -Name $SID3).IdADObject
$allRegValueAssignments | Set-WEMRegistryEntryAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule

# Remove-WEMRegistryEntryAssignment
$adobject = (Get-WEMADUserObject -Connection $db -IdSite $conf.IdSite -Name $SID1).IdADObject
$rule = (Get-WEMRule -Connection $db -IdSite $conf.IdSite -Name "POSH Rule 1").IdRule
$testAssignment = $allRegistryEntries[0] | New-WEMRegistryEntryAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule
$testAssignment | Remove-WEMRegistryEntryAssignment -Connection $db -Verbose

# $allRegValueAssignments = $conf | Get-WEMAssignment -Connection $db -Verbose -AssignmentType "Registry Value"

#endregion

#region WEMEnvironmentVariableAssignments
$conf = Get-WEMConfiguration -Connection $db -Verbose -Name "$($configname)"

# New-WEMEnvironmentVariableAssignment
$adobject = (Get-WEMADUserObject -Connection $db -IdSite $conf.IdSite -Name $SID1).IdADObject
$rule = (Get-WEMRule -Connection $db -IdSite $conf.IdSite -Name "POSH Rule 1").IdRule
$allEnvironmentVariables | New-WEMEnvironmentVariableAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule

# Get-WEMEnvironmentVariableAssignment
# $conf | Get-WEMEnvironmentVariableAssignment -Connection $db -Verbose | Format-Table
$allEnvVariableAssignments = $conf | Get-WEMAssignment -Connection $db -Verbose -AssignmentType "Environment Variable"
$allEnvVariableAssignments | Format-Table

# Set-WEMEnvironmentVariableAssignment
$rule = (Get-WEMRule -Connection $db -Name "Always True").IdRule
$adobject = (Get-WEMADUserObject -Connection $db -IdSite $conf.IdSite -Name $SID3).IdADObject
$allEnvVariableAssignments | Set-WEMEnvironmentVariableAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule

# Remove-WEMEnvironmentVariableAssignment
$adobject = (Get-WEMADUserObject -Connection $db -IdSite $conf.IdSite -Name $SID1).IdADObject
$rule = (Get-WEMRule -Connection $db -IdSite $conf.IdSite -Name "POSH Rule 1").IdRule
$testAssignment = $allEnvironmentVariables[0] | New-WEMEnvironmentVariableAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule
$testAssignment | Remove-WEMEnvironmentVariableAssignment -Connection $db -Verbose

# $allEnvVariableAssignments = $conf | Get-WEMAssignment -Connection $db -Verbose -AssignmentType "Environment Variable"

#endregion

#region WEMPortAssignments
$conf = Get-WEMConfiguration -Connection $db -Verbose -Name "$($configname)"

# New-WEMPortAssignment
$adobject = (Get-WEMADUserObject -Connection $db -IdSite $conf.IdSite -Name $SID1).IdADObject
$rule = (Get-WEMRule -Connection $db -IdSite $conf.IdSite -Name "POSH Rule 1").IdRule
$allPorts | New-WEMPortAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule

# Get-WEMPortAssignment
# $conf | Get-WEMPortAssignment -Connection $db -Verbose | Format-Table
$allPortAssignments = $conf | Get-WEMAssignment -Connection $db -Verbose -AssignmentType "Port"
$allPortAssignments | Format-Table

# Set-WEMPortAssignment
$rule = (Get-WEMRule -Connection $db -Name "Always True").IdRule
$adobject = (Get-WEMADUserObject -Connection $db -IdSite $conf.IdSite -Name $SID3).IdADObject
$allPortAssignments | Set-WEMPortAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule

# Remove-WEMPortAssignment
$adobject = (Get-WEMADUserObject -Connection $db -IdSite $conf.IdSite -Name $SID1).IdADObject
$rule = (Get-WEMRule -Connection $db -IdSite $conf.IdSite -Name "POSH Rule 1").IdRule
$testAssignment = $allPorts[0] | New-WEMPortAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule
$testAssignment | Remove-WEMPortAssignment -Connection $db -Verbose

# $allPortAssignments = $conf | Get-WEMAssignment -Connection $db -Verbose -AssignmentType "Port"

#endregion

#region WEMIniFileOperationAssignments
$conf = Get-WEMConfiguration -Connection $db -Verbose -Name "$($configname)"

# New-WEMIniFileOperationAssignment
$adobject = (Get-WEMADUserObject -Connection $db -IdSite $conf.IdSite -Name $SID1).IdADObject
$rule = (Get-WEMRule -Connection $db -IdSite $conf.IdSite -Name "POSH Rule 1").IdRule
$allIniFileOps | New-WEMIniFileOperationAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule

# Get-WEMIniFileOperationAssignment
# $conf | Get-WEMIniFileOperationAssignment -Connection $db -Verbose | Format-Table
$allIniFileOpAssignments = $conf | Get-WEMAssignment -Connection $db -Verbose -AssignmentType "Ini File Operation"
$allIniFileOpAssignments | Format-Table

# Set-WEMIniFileOperationAssignment
$rule = (Get-WEMRule -Connection $db -Name "Always True").IdRule
$adobject = (Get-WEMADUserObject -Connection $db -IdSite $conf.IdSite -Name $SID3).IdADObject
$allIniFileOpAssignments | Set-WEMIniFileOperationAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule

# Remove-WEMIniFileOperationAssignment
$adobject = (Get-WEMADUserObject -Connection $db -IdSite $conf.IdSite -Name $SID1).IdADObject
$rule = (Get-WEMRule -Connection $db -IdSite $conf.IdSite -Name "POSH Rule 1").IdRule
$testAssignment = $allIniFileOps[0] | New-WEMIniFileOperationAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule
$testAssignment | Remove-WEMIniFileOperationAssignment -Connection $db -Verbose

# $allIniFileOpAssignments = $conf | Get-WEMAssignment -Connection $db -Verbose -AssignmentType "Port"

#endregion

#region WEMWEMExternalTaskAssignments
$conf = Get-WEMConfiguration -Connection $db -Verbose -Name "$($configname)"

# New-WEMExternalTaskAssignment
$adobject = (Get-WEMADUserObject -Connection $db -IdSite $conf.IdSite -Name $SID1).IdADObject
$rule = (Get-WEMRule -Connection $db -IdSite $conf.IdSite -Name "POSH Rule 1").IdRule
$allExternalTasks | New-WEMExternalTaskAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule

# Get-WEMExternalTaskAssignment
# $conf | Get-WEMExternalTaskAssignment -Connection $db -Verbose | Format-Table
$allExtTaskAssignments = $conf | Get-WEMAssignment -Connection $db -Verbose -AssignmentType "External Task"
$allExtTaskAssignments | Format-Table

# Set-WEMExternalTaskAssignment
$rule = (Get-WEMRule -Connection $db -Name "Always True").IdRule
$adobject = (Get-WEMADUserObject -Connection $db -IdSite $conf.IdSite -Name $SID3).IdADObject
$allExtTaskAssignments | Set-WEMExternalTaskAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule

# Remove-WEMExternalTaskAssignment
$adobject = (Get-WEMADUserObject -Connection $db -IdSite $conf.IdSite -Name $SID1).IdADObject
$rule = (Get-WEMRule -Connection $db -IdSite $conf.IdSite -Name "POSH Rule 1").IdRule
$testAssignment = $allExternalTasks[0] | New-WEMExternalTaskAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule
$testAssignment | Remove-WEMExternalTaskAssignment -Connection $db -Verbose

# $allExtTaskAssignments = $conf | Get-WEMAssignment -Connection $db -Verbose -AssignmentType "External Task"

#endregion

#region WEMFileSystemOperationAssignments
$conf = Get-WEMConfiguration -Connection $db -Verbose -Name "$($configname)"

# New-WEMFileSystemOperationAssignment
$adobject = (Get-WEMADUserObject -Connection $db -IdSite $conf.IdSite -Name $SID1).IdADObject
$rule = (Get-WEMRule -Connection $db -IdSite $conf.IdSite -Name "POSH Rule 1").IdRule
$allFileSystemOps | New-WEMFileSystemOperationAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule

# Get-WEMFileSystemOperationAssignment
# $conf | Get-WEMExternalTaskAssignment -Connection $db -Verbose | Format-Table
$allFileSystemOpAssignments = $conf | Get-WEMAssignment -Connection $db -Verbose -AssignmentType "File System Operation"
$allFileSystemOpAssignments | Format-Table

# Set-WEMFileSystemOperationAssignment
$rule = (Get-WEMRule -Connection $db -Name "Always True").IdRule
$adobject = (Get-WEMADUserObject -Connection $db -IdSite $conf.IdSite -Name $SID3).IdADObject
$allFileSystemOpAssignments | Set-WEMFileSystemOperationAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule

# Remove-WEMFileSystemOperationAssignment
$adobject = (Get-WEMADUserObject -Connection $db -IdSite $conf.IdSite -Name $SID1).IdADObject
$rule = (Get-WEMRule -Connection $db -IdSite $conf.IdSite -Name "POSH Rule 1").IdRule
$testAssignment = $allFileSystemOps[0] | New-WEMFileSystemOperationAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule
$testAssignment | Remove-WEMFileSystemOperationAssignment -Connection $db -Verbose

# $allFileSystemOpAssignments = $conf | Get-WEMAssignment -Connection $db -Verbose -AssignmentType "File System Operation"

#endregion

#region WEMUserDSNAssignments
$conf = Get-WEMConfiguration -Connection $db -Verbose -Name "$($configname)"

# New-WEMUserDSNAssignment
$adobject = (Get-WEMADUserObject -Connection $db -IdSite $conf.IdSite -Name $SID1).IdADObject
$rule = (Get-WEMRule -Connection $db -IdSite $conf.IdSite -Name "POSH Rule 1").IdRule
$allUserDSNs | New-WEMUserDSNAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule

# Get-WEMUserDSNAssignment
# $conf | Get-WEMUserDSNAssignment -Connection $db -Verbose | Format-Table
$allUserDSNAssignments = $conf | Get-WEMAssignment -Connection $db -Verbose -AssignmentType "User DSN"
$allUserDSNAssignments | Format-Table

# Set-WEMUserDSNAssignment
$rule = (Get-WEMRule -Connection $db -Name "Always True").IdRule
$adobject = (Get-WEMADUserObject -Connection $db -IdSite $conf.IdSite -Name $SID3).IdADObject
$allUserDSNAssignments | Set-WEMUserDSNAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule

# Remove-WEMUserDSNAssignment
$adobject = (Get-WEMADUserObject -Connection $db -IdSite $conf.IdSite -Name $SID1).IdADObject
$rule = (Get-WEMRule -Connection $db -IdSite $conf.IdSite -Name "POSH Rule 1").IdRule
$testAssignment = $allUserDSNs[0] | New-WEMUserDSNAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule
$testAssignment | Remove-WEMUserDSNAssignment -Connection $db -Verbose

# $allUserDSNAssignments = $conf | Get-WEMAssignment -Connection $db -Verbose -AssignmentType "User DSN"

#endregion

#region WEMFileAssociationAssignments
$conf = Get-WEMConfiguration -Connection $db -Verbose -Name "$($configname)"

# New-WEMFileAssociationAssignment
$adobject = (Get-WEMADUserObject -Connection $db -IdSite $conf.IdSite -Name $SID1).IdADObject
$rule = (Get-WEMRule -Connection $db -IdSite $conf.IdSite -Name "POSH Rule 1").IdRule
$allFileAssocs | New-WEMFileAssociationAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule

# Get-WEMFileAssociationAssignment
# $conf | Get-WEMFileAssociationAssignment -Connection $db -Verbose | Format-Table
$allFileAssocAssignments = $conf | Get-WEMAssignment -Connection $db -Verbose -AssignmentType "File Association"
$allFileAssocAssignments | Format-Table

# Set-WEMFileAssociationAssignment
$rule = (Get-WEMRule -Connection $db -Name "Always True").IdRule
$adobject = (Get-WEMADUserObject -Connection $db -IdSite $conf.IdSite -Name $SID3).IdADObject
$allFileAssocAssignments | Set-WEMFileAssociationAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule

# Remove-WEMUserDSNAssignment
$adobject = (Get-WEMADUserObject -Connection $db -IdSite $conf.IdSite -Name $SID1).IdADObject
$rule = (Get-WEMRule -Connection $db -IdSite $conf.IdSite -Name "POSH Rule 1").IdRule
$testAssignment = $allFileAssocs[0] | New-WEMFileAssociationAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule
$testAssignment | Remove-WEMFileAssociationAssignment -Connection $db -Verbose

# $allFileAssocAssignments = $conf | Get-WEMAssignment -Connection $db -Verbose -AssignmentType "File Association"

#endregion

#region WEMActionGroupAssignments
$conf = Get-WEMConfiguration -Connection $db -Verbose -Name "$($configname)"

# New-WEMActionGroupAssignment
$adobject = (Get-WEMADUserObject -Connection $db -IdSite $conf.IdSite -Name $SID1).IdADObject
$rule = (Get-WEMRule -Connection $db -IdSite $conf.IdSite -Name "POSH Rule 1").IdRule
$allActionGroups | New-WEMActionGroupAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule

# Get-WEMActionGroupAssignment
# $conf | Get-WEMActionGroupAssignment -Connection $db -Verbose | Format-Table
$allActionGroupAssignments = $conf | Get-WEMAssignment -Connection $db -Verbose -AssignmentType "Action Groups"
$allActionGroupAssignments | Format-Table

# Set-WEMActionGroupAssignment
$rule = (Get-WEMRule -Connection $db -Name "Always True").IdRule
$adobject = (Get-WEMADUserObject -Connection $db -IdSite $conf.IdSite -Name $SID3).IdADObject
$allActionGroupAssignments | Set-WEMActionGroupAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule

# Add an extra app to already published Action Group
$allActionGroups[1] | Set-WEMActionGroup -Connection $db -Verbose -AddExternalTask (Get-WEMExternalTask -Connection $db -IdSite $conf.IdSite -Name "POSH External Task 2")

# Remove the extra app from the already published Action Group
$allActionGroups[1] | Set-WEMActionGroup -Connection $db -Verbose -RemoveExternalTask (Get-WEMExternalTask -Connection $db -IdSite $conf.IdSite -Name "POSH External Task 2")

# Remove-WEMUserDSNAssignment
$testAssignment = $allActionGroupAssignments[1]
$testAssignment | Remove-WEMActionGroupAssignment -Connection $db -Verbose

# $allActionGroupAssignments = $conf | Get-WEMAssignment -Connection $db -Verbose -AssignmentType "File Association"

#endregion

#region WEMGroupPolicyObjectAssignments
$conf = Get-WEMConfiguration -Connection $db -Verbose -Name "$($configname)"

# New-WEMGroupPolicyObjectAssignment
$adobject = (Get-WEMADUserObject -Connection $db -IdSite $conf.IdSite -Name "S-1-1-0").IdADObject
$rule = (Get-WEMRule -Connection $db -Name "Always True").IdRule
$allGPOs[0] | New-WEMGroupPolicyObjectAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule -Priority 10
$allGPOs[1] | New-WEMGroupPolicyObjectAssignment -Connection $db -Verbose -IdADObject $adobject -IdRule $rule -Priority 100

# Get-WEMGroupPolicyObjectAssignment
# $conf | Get-WEMGroupPolicyObjectAssignment -Connection $db -Verbose | Format-Table
$allGPOAssignments = $conf | Get-WEMGroupPolicyObjectAssignment -Connection $db -Verbose
$allGPOAssignments | Format-Table

# Set-WEMGroupPolicyObjectAssignment
$allGPOAssignments[0] | Set-WEMGroupPolicyObjectAssignment -Connection $db -Verbose -Priority 200

# Remove-WEMGroupPolicyObjectAssignment
$allGPOAssignments[1] | Remove-WEMGroupPolicyObjectAssignment -Connection $db -Verbose

# $allAppAssignments = $conf | Get-WEMAssignment -Connection $db -Verbose -AssignmentType "Application"

#endregion

$allAssignments = $conf | Get-WEMAssignment -Connection $db -Verbose
$allGPOAssignments = $conf | Get-WEMGroupPolicyObjectAssignment -Connection $db -Verbose

#endregion

#region WEMADAgentObject
$conf = Get-WEMConfiguration -Connection $db -Verbose -Name "$($configname)"

# New-WEMADAgentObject
$conf | New-WEMADAgentObject -Connection $db -Verbose -Id $AgentOU
$conf | New-WEMADAgentObject -Connection $db -Verbose -Id $AgentComputer

# Get-WEMADAgentObject
$allAgentObjects = $conf | Get-WEMADAgentObject -Connection $db -Verbose
$allAgentObjects | Format-Table

# Set-WEMADAgentObject
$allAgentObjects | Set-WEMADAgentObject -Connection $db -Verbose -Description "Set-WEMADAgentObject"

# Remove-WEMADAgentObject
$allAgentObjects | Where-Object { $_.Type -eq "Computer" } | Remove-WEMADAgentObject -Connection $db -Verbose

$allAgentObjects = $conf | Get-WEMADAgentObject -Connection $db -Verbose
#endregion

#region WEMStorefrontSetting
$conf = Get-WEMConfiguration -Connection $db -Verbose -Name "$($configname)"

# New-WEMStorefrontSetting
$conf | New-WEMStorefrontSetting -Connection $db -Verbose -StorefrontUrl "https://store-internal.it-worxx.local/"
$conf | New-WEMStorefrontSetting -Connection $db -Verbose -StorefrontUrl "https://store-external.it-worxx.nl/"
$conf | New-WEMStorefrontSetting -Connection $db -Verbose -StorefrontUrl "dummy url" -State Disabled

# Get-WEMStorefrontSetting
$allStorefrontSettings = $conf | Get-WEMStorefrontSetting -Connection $db -Verbose
$allStorefrontSettings | Format-Table

# Set-WEMStorefrontSetting
$allStorefrontSettings | Set-WEMStorefrontSetting -Connection $db -Verbose -Description "Set-WEMStorefrontSetting"

# Remove-WEMStorefrontSetting
$allStorefrontSettings | Where-Object { $_.StorefrontUrl -like "dummy*" } | Remove-WEMStorefrontSetting -Connection $db -Verbose

$allStorefrontSettings = $conf | Get-WEMStorefrontSetting -Connection $db -Verbose
#endregion

#region WEMAdministrator
$conf = Get-WEMConfiguration -Connection $db -Verbose -Name "$($configname)"

# New-WEMAdministrator
$wemAdmin = New-WEMAdministrator -Connection $db -Verbose -Id $SID5 -State Enabled -Permission "Full Access"
$wemAdmin = New-WEMAdministrator -Connection $db -Verbose -Id $SID2

# Get-WEMAdministrator
$allAdministrators = Get-WEMAdministrator -Connection $db -Verbose
$allAdministrators | Format-Table

# Set-WEMAdministrator
$allAdministrators | Set-WEMAdministrator -Connection $db -Verbose -Description "Set-WEMAdministrator"

$adminPermissions = New-WEMAdministratorPermissionObject -Connection $db -Verbose -IdSite 1 -Permission "Read Only"
Set-WEMAdministrator -Connection $db -Verbose -Permissions $adminPermissions -IdAdministrator $wemAdmin.IdAdministrator
$wemAdmin = Get-WEMAdministrator -Connection $db -Verbose -IdAdministrator $wemAdmin.IdAdministrator
$adminPermissions = @()
$adminPermissions += $wemAdmin.Permissions
$adminPermissions += New-WEMAdministratorPermissionObject -Connection $db -Verbose -IdSite $conf.IdSite -Permission "Full Access"
Set-WEMAdministrator -Connection $db -Verbose -Permissions $adminPermissions -IdAdministrator $wemAdmin.IdAdministrator

# Remove-WEMAdministrator
Remove-WEMAdministrator -Connection $db -Verbose -IdAdministrator $wemAdmin.IdAdministrator

$allAdministrators = Get-WEMAdministrator -Connection $db -Verbose

#endregion

#region WEMApplockerRule
$conf = Get-WEMConfiguration -Connection $db -Verbose -Name "$($configname)"

$conditionFile = "C:\windows\explorer.exe"
$conditionFileInfo = Get-ChildItem -Path $conditionFile
$conditionFileAuthentiCode = Get-AuthenticodeSignature -FilePath $conditionFile
$exceptionFile = "C:\windows\notepad.exe"
$exceptionFileInfo = Get-ChildItem -Path $exceptionFile
$exceptionFileAuthentiCode = Get-AuthenticodeSignature -FilePath $exceptionFile

$adobjectid = (Get-WEMADUserObject -Connection $db -IdSite $conf.IdSite -Name $SID1).IdADObject
$adobjectids = @($adobjectid)

# New-WEMAppLockerRuleConditionObject
$conditionHash = New-WEMAppLockerRuleConditionObject -Verbose -Path "c:\windows" -HashCondition -ConditionPurpose "Executable"
$conditionPath = New-WEMAppLockerRuleConditionObject -Verbose -Path "c:\windows" -PathCondition
$conditionPublisher = New-WEMAppLockerRuleConditionObject -Verbose -Path $conditionFile -PublisherCondition -Publisher $conditionFileAuthentiCode.SignerCertificate.Subject -Product $conditionFileInfo.VersionInfo.ProductName -LowSection $conditionFileInfo.VersionInfo.ProductVersion
$conditionHashException = New-WEMAppLockerRuleConditionObject -Verbose -Path $exceptionFile -HashCondition -ConditionPurpose "Executable"
$conditionPathException = New-WEMAppLockerRuleConditionObject -Verbose -Path $exceptionFile -PathCondition
$conditionPublisherException = New-WEMAppLockerRuleConditionObject -Verbose -Path $exceptionFile -PublisherCondition -Publisher $exceptionFileAuthentiCode.SignerCertificate.Subject -Product $exceptionFileInfo.VersionInfo.ProductName -LowSection $exceptionFileInfo.VersionInfo.ProductVersion

# New-WEMAppLockerRule
New-WEMAppLockerRule -Connection $db -Verbose -IdSite $conf.IdSite -Name "POSH Rule 1" -Type "Executable" -ConditionObject $conditionHash -IdADObjects $adobjectids -Permission "Allow"
New-WEMAppLockerRule -Connection $db -Verbose -IdSite $conf.IdSite -Name "POSH Rule 2" -Type "Executable" -ConditionObject $conditionPath -IdADObjects $adobjectids -Permission "Allow"
New-WEMAppLockerRule -Connection $db -Verbose -IdSite $conf.IdSite -Name "POSH Rule 3" -Type "Executable" -ConditionObject $conditionPublisher -IdADObjects $adobjectids -Permission "Allow"
New-WEMAppLockerRule -Connection $db -Verbose -IdSite $conf.IdSite -Name "POSH Rule 4" -Type "Executable" -ConditionObject $conditionPath -IdADObjects $adobjectids -Permission "Deny" -ExceptionObjects @($conditionHashException, $conditionPathException, $conditionPublisherException)
New-WEMAppLockerRule -Connection $db -Verbose -IdSite $conf.IdSite -Name "POSH Rule Test" -Type "Executable" -ConditionObject $conditionPath -IdADObjects $adobjectids -Permission "Deny" -ExceptionObjects @($conditionHashException, $conditionPathException, $conditionPublisherException)

# Get-WEMAppLockerRule
$allAppLockerRules = $conf | Get-WEMAppLockerRule -Connection $db -Verbose
$allAppLockerRules | Format-Table

# Set-WEMAppLockerRule
$appLockerRule = Get-WEMAppLockerRule -Connection $db -Verbose -Name "POSH Rule Test"
# rename and permission change
$appLockerRule | Set-WEMAppLockerRule -Connection $db -Verbose -Name "POSH Rule Test renamed" -Permission "Allow"
# update exceptions
$appLockerRuleExceptions = $appLockerRule.Exceptions | Where-Object { $_.Type -ne "PublisherCondition" }
$appLockerRule | Set-WEMAppLockerRule -Connection $db -Verbose -ExceptionObjects $appLockerRuleExceptions
# remove exceptions
$appLockerRule | Set-WEMAppLockerRule -Connection $db -Verbose -ExceptionObjects $null
# update condition
$appLockerRule | Set-WEMAppLockerRule -Connection $db -Verbose -ConditionObject $conditionPathException
# update assignments
$adobjectids = @((Get-WEMADUserObject -Connection $db -IdSite $conf.IdSite -Name $SID3).IdADObject)
$appLockerRule | Set-WEMAppLockerRule -Connection $db -Verbose -IdADObjects $adobjectids

# Remove-WEMAppLockerRule
$ruleToRemove = Get-WEMAppLockerRule -Connection $db -Verbose -IdSite $conf.IdSite -Name "POSH Rule Test renamed"
Remove-WEMAppLockerRule -Connection $db -Verbose -IdRule $ruleToRemove.IdRule

$allAppLockerRules = $conf | Get-WEMAppLockerRule -Connection $db -Verbose

#endregion

#region Configuration Settings
$conf = Get-WEMConfiguration -Connection $db -Verbose -Name "$($configname)"

# Set-WEMSystemOptimization
$configSystemOptimization  = @{
    EnableFastLogoff            = 1
    ExcludeGroupsFromFastLogoff = 1
    FastLogoffExcludedGroups    = "$($SID4);$($SID5)"
    Test = "dummy"
}
Set-WEMSystemOptimization -Connection $db -Verbose -IdSite $conf.IdSite -Parameters $configSystemOptimization

# Reset-WEMSystemOptimization
Reset-WEMSystemOptimization -Connection $db -Verbose -IdSite $conf.IdSite

# Get-WEMSystemOptimization
$configSystemOptimization = Get-WEMSystemOptimization -Connection $db -Verbose -IdSite $conf.IdSite
$configSystemOptimization | Format-Table -AutoSize

# Set-WEMEnvironmentalSettings
$configEnvironmentalSettings  = @{
    NoPropertiesMyComputer = 1
    NoTrayContextMenu      = 1
    Wallpaper              = "\\SERVER\SHARE\bitmapfile.png"
    Test = "dummy"
}
Set-WEMEnvironmentalSettings -Connection $db -Verbose -IdSite $conf.IdSite -Parameters $configEnvironmentalSettings

# Reset-WEMEnvironmentalSettings
Reset-WEMEnvironmentalSettings -Connection $db -Verbose -IdSite $conf.IdSite

# Get-WEMEnvironmentalSettings
$configEnvironmentalSettings = Get-WEMEnvironmentalSettings -Connection $db -Verbose -IdSite $conf.IdSite
$configEnvironmentalSettings | Format-Table -AutoSize

# Set-WEMUSVSettings
$configUSVSettings  = @{
    processUSVConfiguration          = 1
    processUSVConfigurationForAdmins = 1
    RDSHomeDriveLetter               = "R:"
    Test = "dummy"
}
Set-WEMUSVSettings -Connection $db -Verbose -IdSite $conf.IdSite -Parameters $configUSVSettings

# Reset-WEMUSVSettings
Reset-WEMUSVSettings -Connection $db -Verbose -IdSite $conf.IdSite

# Get-WEMUSVSettings
$configUSVSettings = Get-WEMUSVSettings -Connection $db -Verbose -IdSite $conf.IdSite
$configUSVSettings | Format-Table -AutoSize

# Set-WEMUPMSettings
$configUPMSettings  = @{
    LoggingEnabled  = 1
    CEIPENabled     = 0
    PathToUserStore = "Windows"
    Test = "dummy"
}
Set-WEMUPMSettings -Connection $db -Verbose -IdSite $conf.IdSite -Parameters $configUPMSettings

# Reset-WEMUPMSettings
Reset-WEMUPMSettings -Connection $db -Verbose -IdSite $conf.IdSite

# Get-WEMUPMSettings
$configUPMSettings = Get-WEMUPMSettings -Connection $db -Verbose -IdSite $conf.IdSite
$configUPMSettings | Format-Table -AutoSize

# Set-WEMPersonaSettings
$configPersonaSettings  = @{
    HideFileCopyProgress = 1
    DebugError           = 1
    LogPath              = "C:\Logs"
    Test = "dummy"
}
Set-WEMPersonaSettings -Connection $db -Verbose -IdSite $conf.IdSite -Parameters $configPersonaSettings

# Reset-WEMPersonaSettings
Reset-WEMPersonaSettings -Connection $db -Verbose -IdSite $conf.IdSite

# Get-WEMPersonaSettings
$configPersonaSettings = Get-WEMPersonaSettings -Connection $db -Verbose -IdSite $conf.IdSite
$configPersonaSettings | Format-Table -AutoSize

# Set-WEMTransformerSettings
$configTransformerSettings  = @{
    GeneralEnableLanguageSelect = 1
    PowerShutdownAfterIdleTime  = 900
    AutologonDomain             = "it-worxx.local"
    Test = "dummy"
}
Set-WEMTransformerSettings -Connection $db -Verbose -IdSite $conf.IdSite -Parameters $configTransformerSettings

# Reset-WEMTransformerSettings
Reset-WEMTransformerSettings -Connection $db -Verbose -IdSite $conf.IdSite

# Get-WEMTransformerSettings
$configTransformerSettings = Get-WEMTransformerSettings -Connection $db -Verbose -IdSite $conf.IdSite
$configTransformerSettings | Format-Table -AutoSize

# Set-WEMAgentSettings
$configAgentSettings  = @{
    processVUEMUserDSNs                = 1
    AgentDirectoryServiceTimeoutValue  = 30000
    AgentLogFile                       = "C:\Logs\%USERNAME% Agent Log.log"
    Test = "dummy"
}
Set-WEMAgentSettings -Connection $db -Verbose -IdSite $conf.IdSite -Parameters $configAgentSettings

# Reset-WEMAgentSettings
Reset-WEMAgentSettings -Connection $db -Verbose -IdSite $conf.IdSite

# Get-WEMAgentSettings
$configAgentSettings = Get-WEMAgentSettings -Connection $db -Verbose -IdSite $conf.IdSite
$configAgentSettings | Format-Table -AutoSize

# Set-WEMAppLockerSettings
$configAppLockerSettings  = @{
    EnableDLLRuleCollection  = 1
    EnableProcessesAppLocker = 1
    Test = "dummy"
}
Set-WEMAppLockerSettings -Connection $db -Verbose -IdSite $conf.IdSite -Parameters $configAppLockerSettings

# Reset-WEMAppLockerSettings
Reset-WEMAppLockerSettings -Connection $db -Verbose -IdSite $conf.IdSite

# Get-WEMLockerSettings
$configAppLockerSettings = Get-WEMAppLockerSettings -Connection $db -Verbose -IdSite $conf.IdSite
$configAppLockerSettings | Format-Table -AutoSize

# Set-WEMGroupPolicyGlobalSettings -> CAREFUL! These are not visible in WEM Admin Console 1906-2003. I don't know where they are used
$configGroupPolicyGlobalSettings  = @{
    EnableGroupPolicyEnforcement  = 1
    Test = "dummy"
}
Set-WEMGroupPolicyGlobalSettings -Connection $db -Verbose -IdSite $conf.IdSite -Parameters $configGroupPolicyGlobalSettings

# Reset-WEMGroupPolicyGlobalSettings -> CAREFUL! These are not visible in WEM Admin Console 1906. I don't know where they are used 
Reset-WEMGroupPolicyGlobalSettings -Connection $db -Verbose -IdSite $conf.IdSite

# Get-WEMGroupPolicyGlobalSettings -> CAREFUL! These are not visible in WEM Admin Console 1906. I don't know where they are used
$configGroupPolicyGlobalSettings = Get-WEMGroupPolicyGlobalSettings -Connection $db -Verbose -IdSite $conf.IdSite
$configGroupPolicyGlobalSettings | Format-Table -AutoSize

# Set-WEMParameters
$configParameters  = @{
    AllowDriveLetterReuse  = 1
    excludedDriveletters   = "A;B;C;D;E;F"
    Test = "dummy"
}
Set-WEMParameters -Connection $db -Verbose -IdSite $conf.IdSite -Parameters $configParameters

# Reset-WEMParameters
Reset-WEMParameters -Connection $db -Verbose -IdSite $conf.IdSite

# Get-WEMParameters
$configParameters = Get-WEMParameters -Connection $db -Verbose -IdSite $conf.IdSite
$configParameters | Format-Table -AutoSize

# Set-WEMSystemMonitoringSettings
$configSystemMonitoringSettings  = @{
    EnableWorkDaysFiltering  = 0
    WorkDaysFilter   = "0;0;0;0;0;1;1"
    Test = "dummy"
}
Set-WEMSystemMonitoringSettings -Connection $db -Verbose -IdSite $conf.IdSite -Parameters $configSystemMonitoringSettings

# Reset-WEMSystemMonitoringSettings
Reset-WEMSystemMonitoringSettings -Connection $db -Verbose -IdSite $conf.IdSite

# Get-WEMSystemMonitoringSettings
$configSystemMonitoringSettings = Get-WEMSystemMonitoringSettings -Connection $db -Verbose -IdSite $conf.IdSite
$configSystemMonitoringSettings | Format-Table -AutoSize

#endregion

#region CitrixOptimizerConfigurations
$conf = Get-WEMConfiguration -Connection $db -Verbose -Name "$($configname)"

# New-WEMCitrixOptimizerConfiguration
$conf | New-WEMCitrixOptimizerConfiguration -Connection $db -Verbose -TemplateXmlFile "<path to Citrix Optimizer template Xml file>" -Targets @("Windows 10 Version 1903") -State Disabled

# Get-WEMCitrixOptimizerConfiguration
$allCitrixOptimizerConfigurations = $conf | Get-WEMCitrixOptimizerConfiguration -Connection $db -Verbose
#$newCitrixOptimizerConfiguration = $conf | Get-WEMCitrixOptimizerConfiguration -Connection $db -Name "Citrix.WEMSDK.test"
$allCitrixOptimizerConfigurations | Format-Table

# Set-WEMCitrixOptimizerConfiguration
$allCitrixOptimizerConfigurations | ForEach-Object { Set-WEMCitrixOptimizerConfiguration -Connection $db -Verbose -IdSite $_.IdSite -IdTemplate $_.IdTemplate -State Disabled }
#Set-WEMCitrixOptimizerConfiguration -Connection $db -Verbose -IdSite $newCitrixOptimizerConfiguration.IdSite -IdTemplate $newCitrixOptimizerConfiguration.IdTemplate -State Enabled

# Remove-WEMCitrixOptimizerConfiguration
#Remove-WEMApplication -Connection $db -Verbose -IdSite $conf.IdSite -IdTemplate $newCitrixOptimizerConfiguration.IdTemplate

$allCitrixOptimizerConfigurations = $conf | Get-WEMCitrixOptimizerConfiguration -Connection $db -Verbose
#endregion

# generate some output
$allActions        | Select-Object IdAction, IdSite, Category, Name, DisplayName, Description, State, Type, ActionType | Format-Table
$allGPOs           | Format-Table
$allADObjects      | Where-Object { $_.Type -notlike "BUILTIN" } | Select-Object IdADObject, IdSite, Name, Description, State, Type, Priority | Format-Table
$allConditions     | Select-Object IdSite, IdCondition, Name, Type, TestValue, TestResult | Format-Table
$allRules          | Select-Object IdSite, IdRule, Name, Conditions | Format-Table
$allActionGroups   | Format-Table
$allAssignments    | Format-Table
$allAgentObjects   | Format-Table
$allAdministrators | Format-Table
$allAppLockerRules | Format-Table
$allCitrixOptimizerConfigurations | Select-Object IdTemplate, IdSite, Name, Targets, State | Format-Table

# dispose of the database connection
$db.Dispose()