Intune Initial Scripts Backup

intune/Proactive Remediations/Tenable-AgentStatus/Remediate-Serverslist.ps1

@@ -0,0 +1,12 @@
+$serverlist = Import-Csv '.\intune\Proactive Remediations\Tenable-AgentStatus\servers.csv'
+
+foreach ($server in $serverlist) {
+    $serverName = $server.ServerName
+    $cred = $server.Credential
+    $session = New-PSSession -ComputerName $serverName -Credential $cred
+    Invoke-Command -Session $session -ScriptBlock { 
+        param($serverName)
+        .\intune\Proactive Remediations\Tenable-AgentStatus\remediate-agent.ps1
+    } -ArgumentList $serverName
+    Remove-PSSession -Session $session
+}

intune/Proactive Remediations/Tenable-AgentStatus/detect.ps1

@@ -0,0 +1,24 @@
+cd "C:\Program Files\Tenable\Nessus Agent"
+$NessusStatus = .\nessuscli agent status
+$NessusStatusString = $NessusStatus | out-string
+
+if ($nessusstatus[2].Contains("disconnected")) {
+    Write-Host "Nessus Agent is Disconnected and requires remediation "$nessusstatus[2]
+    exit 1
+}
+elseif ($nessusstatus[2].Contains("authentication error")) {
+    Write-Host "Nessus Agent is in authorization error state and requires remediation "$nessusstatus[2]
+    exit 1
+}
+elseif ($nessusstatus[2].Contains("Not linked to a manager")) {
+    Write-Host "Nessus Agent is Not linked to a manager "$nessusstatus[2]
+    exit 1
+}
+elseif ($nessusstatus[2].Contains("Link status: Connected to paptennm001.ccx.carecentrix.com:8834")) {
+    Write-Host "Nessus Agent is connected and healthy "$nessusstatus[2]
+    exit 0
+}
+else {
+    Write-Host "Nessus Agent in an unknown status "$nessusstatus[2]
+    exit 1
+}

intune/Proactive Remediations/Tenable-AgentStatus/remediate-desktops.ps1

@@ -0,0 +1,54 @@
+cd "C:\Program Files\Tenable\Nessus Agent" 
+$nessusstatus = .\nessuscli.exe agent status
+
+$ServiceName = "Tenable Nessus Agent"
+Write-Host "Stopping Nessus Agent" 
+Stop-Service $ServiceName
+Start-Sleep -Seconds 5
+$service = (Get-Service -Name $ServiceName -ErrorAction Stop)
+
+if ($service.Status -eq "Stopped") { 
+
+    if ($nessusstatus[2].Contains("disconnected")) {     
+        .\Nessuscli.exe plugins --reset 
+        start-Service $ServiceName
+        Start-Sleep -Seconds 600
+        $pluginstatus = (.\Nessuscli.exe plugins --info) | Out-String
+        $nessusstatus = .\nessuscli.exe agent status
+        Write-Host "Plugin Reset and Agent Started: "$nessusstatus[2]
+  
+        exit 0 
+    }
+    elseif ($nessusstatus[2].Contains("authentication error")) {     
+        .\Nessuscli.exe agent link --key=0f0147f977db9a4ea74c34b2a24221cdac7715a36665525537718f48e5edafd5 --host=paptennm001.ccx.carecentrix.com --port=8834 --groups="Agent - VPN - GlobalProtect"
+        .\Nessuscli.exe plugins --reset 
+        Start-Service $ServiceName 
+        Start-Sleep -Seconds 600
+        $nessusstatus = .\nessuscli.exe agent status
+        Write-Host "Agent Re-Linked: "$nessusstatus[2]
+        exit 0 
+    }
+    elseif ($nessusstatus[2].Contains("Not linked to a manager")) {     
+        .\Nessuscli.exe agent link --key=0f0147f977db9a4ea74c34b2a24221cdac7715a36665525537718f48e5edafd5 --host=paptennm001.ccx.carecentrix.com --port=8834 --groups="Agent - VPN - GlobalProtect"
+        Start-Service $ServiceName 
+        Start-Sleep -Seconds 600
+        $nessusstatus = .\nessuscli.exe agent status
+        Write-Host "Agent Re-Linked: "$nessusstatus[2]
+        exit 0 
+    }
+    elseif ($nessusstatus[2].Contains("Connected to paptennm001.ccx.carecentrix.com:8834")) {     
+        Write-Host "Nessus Agent is connected and healthy: "$nessusstatus[2]
+        Start-Service $ServiceName 
+        exit 0
+    }
+    else {
+        Write-Host "Unknown Remediation Required: "$nessusstatus[2]
+        Start-Service $ServiceName 
+        exit 1
+    }
+
+}
+else { 
+    Write-Host "Nessus Agent Not Stopped"
+    exit 1
+} 

intune/Proactive Remediations/Tenable-AgentStatus/remediate-servers.ps1

@@ -0,0 +1,55 @@
+
+cd "C:\Program Files\Tenable\Nessus Agent" 
+$nessusstatus = .\nessuscli.exe agent status
+
+$ServiceName = "Tenable Nessus Agent"
+Write-Host "Stopping Nessus Agent" 
+Stop-Service $ServiceName
+Start-Sleep -Seconds 5
+$service = (Get-Service -Name $ServiceName -ErrorAction Stop)
+
+if ($service.Status -eq "Stopped") { 
+
+    if ($nessusstatus[2].Contains("disconnected")) {     
+        .\Nessuscli.exe plugins --reset 
+        start-Service $ServiceName
+        Start-Sleep -Seconds 600
+        $pluginstatus = (.\Nessuscli.exe plugins --info) | Out-String
+        $nessusstatus = .\nessuscli.exe agent status
+        Write-Host "Plugin Reset and Agent Started: "$nessusstatus[2]
+  
+        return true
+    }
+    elseif ($nessusstatus[2].Contains("authentication error")) {     
+        .\nessuscli.exe agent link --key=0f0147f977db9a4ea74c34b2a24221cdac7715a36665525537718f48e5edafd5 --host=paptennm001.ccx.carecentrix.com --port=8834 --groups="Agent - Windows Servers"
+        .\Nessuscli.exe plugins --reset 
+        Start-Sleep -Seconds 600
+        $nessusstatus = .\nessuscli.exe agent status
+        Write-Host "Agent Re-Linked: "$nessusstatus[2]
+        Start-Service $ServiceName 
+        return true 
+    }
+    elseif ($nessusstatus[2].Contains("Not linked to a manager")) {     
+        .\nessuscli.exe agent link --key=0f0147f977db9a4ea74c34b2a24221cdac7715a36665525537718f48e5edafd5 --host=paptennm001.ccx.carecentrix.com --port=8834 --groups="Agent - Windows Servers"
+        Start-Service $ServiceName 
+        Start-Sleep -Seconds 600
+        $nessusstatus = .\nessuscli.exe agent status
+        Write-Host "Agent Re-Linked: "$nessusstatus[2]
+        return true 
+    }
+    elseif ($nessusstatus[2].Contains("Connected to paptennm001.ccx.carecentrix.com:8834")) {     
+        Write-Host "Nessus Agent is connected and healthy: "$nessusstatus[2]
+        Start-Service $ServiceName 
+        return true
+    }
+    else {
+        Write-Host "Unknown Remediation Required: "$nessusstatus[2]
+        Start-Service $ServiceName 
+        return false
+    }
+
+}
+else { 
+    Write-Host "Nessus Agent Not Stopped"
+    return false
+}

intune/Proactive Remediations/Tenable-AgentStatus/servers.csv

@@ -0,0 +1,64 @@
+DNCRADOPSSQL02
+DNCRANICEAPI01
+DNCRARDSUIR01
+DNCRAREDIS01
+DNCRASECTEST01
+DRAWSDC01
+DRAWSDC02
+FLT2PSQL021
+PAWSZVM01
+PFAX021
+PMDA014
+PMDA017
+PMON005
+PNCRAAPPSQL01
+PNCRABIZSQL11
+PNCRABIZSQL12
+PNCRABIZSQL21
+PNCRABIZSQL22
+PNCRABIZSQLQ11
+PNCRABIZSQLQ21
+PNCRACBAC01
+PNCRACMX01
+PNCRADOPSSQL01
+PNCRADOPSSQL02
+PNCRADOPSSQL03
+PNCRADOPSSQLQ01
+PNCRAEDITAB01
+PNCRAEISSQL01
+PNCRAFSSQL01
+PNCRAMISCSQL01
+PNCRANICEAPI01
+PNCRANICESQL01
+PNCRAPSPT002
+PNCRARDSUIS01
+PNCRASCCMSUP01
+PNCRASPWFE01
+PNCRASSIS02
+PNCRATABL003
+PNCRAVAR03
+PNCRAVB01
+PNCRAVBT01
+PNCRAVDIFS02
+PNCRAVJB01
+PNCRAVPRXY001
+PNCRAVPRXY002
+PNCRAWFM02
+PNCRAWFM05
+PNCRAWFM06
+PSQL026
+PSQL030A
+PSQL030B
+Q1NCRASSIS02
+QCMX001
+QNCRACMX01
+QNCRARDS11
+QNCRARDSJB03
+QSIS010
+VLANTESTING
+VLANTESTING2
+VM-SCCMDANE-01
+VM-SCCMOSD-01
+VM-SCCMOSD-02
+VM-SCCMOSD-03
+VM-SCCMOSD-06