255 lines
8.6 KiB
PowerShell
255 lines
8.6 KiB
PowerShell
#!powershell
|
|
# This file is part of Ansible
|
|
#
|
|
# Copyright 2015, Peter Mounce <public@neverrunwithscissors.com>
|
|
# Michael Perzel <michaelperzel@gmail.com>
|
|
#
|
|
# Ansible is free software: you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation, either version 3 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# Ansible is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with Ansible. If not, see <http://www.gnu.org/licenses/>.
|
|
|
|
$ErrorActionPreference = "Stop"
|
|
|
|
# WANT_JSON
|
|
# POWERSHELL_COMMON
|
|
|
|
$result = @{
|
|
changed = $false
|
|
}
|
|
|
|
function Invoke-TaskPathCheck {
|
|
[CmdletBinding(SupportsShouldProcess=$true)]
|
|
param($Path, [Switch]$Remove)
|
|
|
|
$pathResults = @{
|
|
PathExists = $null
|
|
RemovedPath = $false
|
|
}
|
|
|
|
if ($path -ne "\") {
|
|
$trimmedPath = $Path.TrimEnd("\")
|
|
}
|
|
else {
|
|
$trimmedPath = $Path
|
|
}
|
|
|
|
$scheduleObject = New-Object -ComObject Schedule.Service
|
|
$scheduleObject.Connect()
|
|
|
|
try {
|
|
$targetFolder = $scheduleObject.GetFolder($trimmedPath)
|
|
$pathResults.PathExists = $true
|
|
}
|
|
catch {
|
|
$pathResults.PathExists = $false
|
|
}
|
|
|
|
if ($Remove -and $pathResults.PathExists) {
|
|
$childFolders = $targetFolder.GetFolders($null)
|
|
$childTasks = $targetFolder.GetTasks($null)
|
|
|
|
if ($childFolders.Count -eq 0 -and $childTasks.Count -eq 0) {
|
|
if ($PSCmdlet.ShouldProcess($trimmedPath, "Remove task path")) {
|
|
$rootFolder = $scheduleObject.GetFolder("\")
|
|
$rootFolder.DeleteFolder($trimmedPath, $null)
|
|
}
|
|
$pathResults.RemovedPath = $true
|
|
}
|
|
}
|
|
|
|
return $pathResults
|
|
}
|
|
|
|
$params = Parse-Args $args -supports_check_mode $true
|
|
$check_mode = Get-AnsibleParam -obj $params -name "_ansible_check_mode" -type "bool" -default $false
|
|
|
|
$arguments = Get-AnsibleParam -obj $params -name "arguments" -type "str" -aliases "argument"
|
|
$description = Get-AnsibleParam -obj $params -name "description" -type "str" -default "No description."
|
|
$enabled = Get-AnsibleParam -obj $params -name "enabled" -type "bool" -default $true
|
|
$path = Get-AnsibleParam -obj $params -name "path" -type "str" -default '\'
|
|
|
|
# Required vars
|
|
$name = Get-AnsibleParam -obj $params -name "name" -type "str" -failifempty $true
|
|
$state = Get-AnsibleParam -obj $params -name "state" -type "str" -default "present" -validateset "present","absent"
|
|
|
|
# Vars conditionally required
|
|
$present = $state -eq "present"
|
|
$executable = Get-AnsibleParam -obj $params -name "executable" -type "str" -aliases "execute" -failifempty $present
|
|
$frequency = Get-AnsibleParam -obj $params -name "frequency" -type "str" -validateset "once","daily","weekly" -failifempty $present
|
|
$time = Get-AnsibleParam -obj $params -name "time" -type "str" -failifempty $present
|
|
|
|
$user = Get-AnsibleParam -obj $params -name "user" -default "$env:USERDOMAIN\$env:USERNAME" -type "str"
|
|
$password = Get-AnsibleParam -obj $params -name "password" -type "str"
|
|
$runlevel = Get-AnsibleParam -obj $params -name "runlevel" -default "limited" -type "str" -validateset "limited", "highest"
|
|
$store_password = Get-AnsibleParam -obj $params -name "store_password" -default $true -type "bool"
|
|
|
|
$weekly = $frequency -eq "weekly"
|
|
$days_of_week = Get-AnsibleParam -obj $params -name "days_of_week" -type "str" -failifempty $weekly
|
|
|
|
|
|
try {
|
|
$task = Get-ScheduledTask | Where-Object {$_.TaskName -eq $name -and $_.TaskPath -eq $path}
|
|
|
|
# Correlate task state to enable variable, used to calculate if state needs to be changed
|
|
$taskState = if ($task) { $task.State } else { $null }
|
|
if ($taskState -eq "Ready"){
|
|
$taskState = $true
|
|
}
|
|
elseif($taskState -eq "Disabled"){
|
|
$taskState = $false
|
|
}
|
|
else
|
|
{
|
|
$taskState = $null
|
|
}
|
|
|
|
$measure = $task | measure
|
|
if ($measure.count -eq 1 ) {
|
|
$exists = $true
|
|
}
|
|
elseif ( ($measure.count -eq 0) -and ($state -eq "absent") ){
|
|
# Nothing to do
|
|
$result.exists = $false
|
|
$result.msg = "Task does not exist"
|
|
|
|
Exit-Json $result
|
|
}
|
|
elseif ($measure.count -eq 0){
|
|
$exists = $false
|
|
}
|
|
else {
|
|
# This should never occur
|
|
Fail-Json $result "$($measure.count) scheduled tasks found"
|
|
}
|
|
|
|
$result.exists = $exists
|
|
|
|
if ($frequency){
|
|
if ($frequency -eq "once") {
|
|
$trigger = New-ScheduledTaskTrigger -Once -At $time
|
|
}
|
|
elseif ($frequency -eq "daily") {
|
|
$trigger = New-ScheduledTaskTrigger -Daily -At $time
|
|
}
|
|
elseif ($frequency -eq "weekly"){
|
|
$trigger = New-ScheduledTaskTrigger -Weekly -At $time -DaysOfWeek $days_of_week
|
|
}
|
|
else {
|
|
Fail-Json $result "frequency must be daily or weekly"
|
|
}
|
|
}
|
|
|
|
if ( ($state -eq "absent") -and ($exists) ) {
|
|
Unregister-ScheduledTask -TaskName $name -Confirm:$false -WhatIf:$check_mode
|
|
$result.changed = $true
|
|
$result.msg = "Deleted task $name"
|
|
|
|
# Remove task path if it exists
|
|
$pathResults = Invoke-TaskPathCheck -Path $path -Remove -WhatIf:$check_mode
|
|
|
|
if ($pathResults.RemovedPath) {
|
|
$result.msg += " and task path $path removed"
|
|
}
|
|
|
|
Exit-Json $result
|
|
}
|
|
elseif ( ($state -eq "absent") -and (-not $exists) ) {
|
|
$result.msg = "Task $name does not exist"
|
|
Exit-Json $result
|
|
}
|
|
|
|
# Handle RunAs/RunLevel options for the task
|
|
|
|
if ($store_password) {
|
|
# Specify direct credential and run-level values to add to Register-ScheduledTask
|
|
$registerRunOptionParams = @{
|
|
User = $user
|
|
RunLevel = $runlevel
|
|
}
|
|
if ($password) {
|
|
$registerRunOptionParams.Password = $password
|
|
}
|
|
}
|
|
else {
|
|
# Create a ScheduledTaskPrincipal for the task to run under
|
|
$principal = New-ScheduledTaskPrincipal -UserId $user -LogonType S4U -RunLevel $runlevel -Id Author
|
|
$registerRunOptionParams = @{Principal = $principal}
|
|
}
|
|
|
|
if ($enabled){
|
|
$settings = New-ScheduledTaskSettingsSet
|
|
}
|
|
else {
|
|
$settings = New-ScheduledTaskSettingsSet -Disable
|
|
}
|
|
|
|
if ($arguments) {
|
|
$action = New-ScheduledTaskAction -Execute $executable -Argument $arguments
|
|
}
|
|
else {
|
|
$action = New-ScheduledTaskAction -Execute $executable
|
|
}
|
|
|
|
if ( ($state -eq "present") -and (-not $exists) ){
|
|
# Check task path prior to registering
|
|
$pathResults = Invoke-TaskPathCheck -Path $path
|
|
|
|
if (-not $check_mode) {
|
|
Register-ScheduledTask -Action $action -Trigger $trigger -TaskName $name -Description $description -TaskPath $path -Settings $settings @registerRunOptionParams
|
|
}
|
|
|
|
$result.changed = $true
|
|
$result.msg = "Added new task $name"
|
|
|
|
if (!$pathResults.PathExists) {
|
|
$result.msg += " and task path $path created"
|
|
}
|
|
}
|
|
elseif( ($state -eq "present") -and ($exists) ) {
|
|
# Check task path prior to registering
|
|
$pathResults = Invoke-TaskPathCheck -Path $path
|
|
|
|
if ((!$store_password -and $task.Principal.LogonType -in @("S4U", "ServiceAccount")) -or ($store_password -and $task.Principal.LogonType -notin @("S4U", "Password") -and !$password)) {
|
|
$passwordStoreConsistent = $true
|
|
}
|
|
else {
|
|
$passwordStoreConsistent = $false
|
|
}
|
|
|
|
if ($task.Description -eq $description -and $task.TaskName -eq $name -and $task.TaskPath -eq $path -and $task.Actions.Execute -eq $executable -and
|
|
$taskState -eq $enabled -and $task.Principal.UserId -eq $user -and $task.Principal.RunLevel -eq $runlevel -and $passwordStoreConsistent) {
|
|
# No change in the task
|
|
$result.msg = "No change in task $name"
|
|
}
|
|
else {
|
|
Unregister-ScheduledTask -TaskName $name -Confirm:$false -WhatIf:$check_mode
|
|
|
|
if (-not $check_mode) {
|
|
$oldPathResults = Invoke-TaskPathCheck -Path $task.TaskPath -Remove
|
|
Register-ScheduledTask -Action $action -Trigger $trigger -TaskName $name -Description $description -TaskPath $path -Settings $settings @registerRunOptionParams
|
|
}
|
|
$result.changed = $true
|
|
$result.msg = "Updated task $name"
|
|
|
|
if (!$pathResults.PathExists) {
|
|
$result.msg += " and task path $path created"
|
|
}
|
|
}
|
|
}
|
|
|
|
Exit-Json $result
|
|
}
|
|
catch
|
|
{
|
|
Fail-Json $result $_.Exception.Message
|
|
}
|