unknown ps1

<#
	.DESCRIPTION
		This script performs network drive mappings with PowerShell and is auto generated by the intune-drive-mapping-generator (https://intunedrivemapping.azurewebsites.net).
		When executed under SYSTEM authority a scheduled task is created to ensure recurring script execution on each user logon.

	.NOTES
		Author: Nicola Suter, nicolonsky tech: https://tech.nicolonsky.ch
#>

[CmdletBinding()]
Param()


###########################################################################################
# Start transcript for logging															  #
###########################################################################################

Start-Transcript -Path $(Join-Path $env:temp "DriveMapping.log")

###########################################################################################
# Input values from generator															  #
###########################################################################################

$homed=""
$omd=$env:OneDrive+"\My Documents"
$od=$env:OneDrive+"\Documents"
if ($env:homeshare)
{
    $homed="\\\\mbs-azserver01\\home$\\$env:HOMESHARE"
} elseif ($env:OneDrive)
{
    $homed=$env:OneDrive.Replace(":", "$")
    if (Test-Path -Path $od)
    {
        $homed=$homed+"\Documents"
    } elseif (Test-Path -Path $omd)
    {
        $homed=$homed+"\My Documents"
    }
}


$driveMappingJson='[
{"Path":"\\\\mbs-azserver01\\files2\\Data","DriveLetter":"U","Label":"Data.","Id":0,"GroupFilter":null},
{"Path":"\\\\mbs-azserver01\\files\\publications","DriveLetter":"P","Label":"Publications.","Id":2,"GroupFilter":null},
{"Path":"\\\\mbs-azserver01\\files\\Site Data","DriveLetter":"V","Label":"Site Data.","Id":3,"GroupFilter":null},
{"Path":"\\\\mbs-azserver01\\files2\\MBM-LA","DriveLetter":"K","Label":"MBM LA Files.","Id":4,"GroupFilter":null},
{"Path":"\\\\mbs-azserver01\\files2\\sundata","DriveLetter":"S","Label":"Sunwheel Data.","Id":5,"GroupFilter":null},
{"Path":"\\\\mbs-azserver01\\files2\\MBS-LA","DriveLetter":"G","Label":"MBS LA Files.","Id":6,"GroupFilter":null},
{"Path":"\\\\mbs-azserver01\\files\\urban","DriveLetter":"X","Label":"Urban Files.","Id":8,"GroupFilter":null},
{"Path":"\\\\$env:computername\\$homed","DriveLetter":"Z","Label":"My Documents.","Id":10,"GroupFilter":null},
{"Path":"\\\\mbs-azserver01\\files2\\Data\\Projects","DriveLetter":"F","Label":"Project Files.","Id":11,"GroupFilter":null}
]'

$driveMappingConfig= $driveMappingJson | ConvertFrom-Json

Start-Sleep -Seconds 30

###########################################################################################
# Helper function to determine a users group membership									  #
###########################################################################################

# Kudos for Tobias Renström who showed me this!
function Get-ADGroupMembership {
	param(
		[parameter(Mandatory=$true)]
		[string]$UserPrincipalName
	)
	process{

		try{

			$Searcher = New-Object -TypeName System.DirectoryServices.DirectorySearcher
			$Searcher.Filter = "(&(userprincipalname=$UserPrincipalName))"
			$Searcher.SearchRoot = "LDAP://$env:USERDNSDOMAIN"
			$DistinguishedName = $Searcher.FindOne().Properties.distinguishedname
			$Searcher.Filter = "(member:1.2.840.113556.1.4.1941:=$DistinguishedName)"

			[void]$Searcher.PropertiesToLoad.Add("name")

			$List = [System.Collections.Generic.List[String]]@()

			$Results = $Searcher.FindAll()

			foreach ($Result in $Results) {
				$ResultItem = $Result.Properties
				[void]$List.add($ResultItem.name)
			}

			$List

		}catch{
			#Nothing we can do
			Write-Warning $_.Exception.Message
		}
	}
}

###########################################################################################
# Get current group membership for the group filter capabilities						  #
###########################################################################################

if ($driveMappingConfig.GroupFilter){
	try{
		#check if running as user and not system
		if (-not ($(whoami -user) -match "S-1-5-18")){

			$groupMemberships = Get-ADGroupMembership -UserPrincipalName $(whoami -upn)
		}
	}catch{
		#nothing we can do
	}
}
###########################################################################################
# Mapping network drives																  #
###########################################################################################
#Get PowerShell drives and rename properties
try{

	$psDrives = Get-PSDrive | Select-Object @{N="DriveLetter"; E={$_.Name}}, @{N="Path"; E={$_.DisplayRoot}}

}catch{

	Write-Warning $_.Exception.Message
}

#iterate through all network drive configuration entries
$driveMappingConfig.GetEnumerator() | ForEach-Object {

	try{

		#check if variable in unc path exists, e.g. for $env:USERNAME
		if ($PSItem.Path -match '\$env:'){

			$PsItem.Path=$ExecutionContext.InvokeCommand.ExpandString($PSItem.Path)

		}

		#if label is null we need to set it to empty in order to avoid error
		if ($PSItem.Label -eq $null){

			$Psitem.Label = ""
		}

		#check if the drive is already connected with an identical configuration
		if ( -not ($psDrives.Path -contains $PSItem.Path -and $psDrives.DriveLetter -contains $PSItem.DriveLetter)){

			#check if drive exists - but with wrong config - to delete it
			if($psDrives.Path -contains $PSItem.Path -or $psDrives.DriveLetter -contains $PSItem.DriveLetter){

				Get-PSDrive | Where-Object {$_.DisplayRoot -eq $PSItem.Path -or $_.Name -eq $PSItem.DriveLetter} | Remove-PSDrive -ErrorAction SilentlyContinue
			}

				## check itemleveltargeting for group membership
			if ($PSItem.GroupFilter -ne $null -and $groupMemberships -contains $PSItem.GroupFilter){

				Write-Output "Mapping network drive $($PSItem.Path)"

				$null = New-PSDrive -PSProvider FileSystem -Name $PSItem.DriveLetter -Root $PSItem.Path -Description $PSItem.Label -Persist -Scope global -EA SilentlyContinue

				(New-Object -ComObject Shell.Application).NameSpace("$($PSItem.DriveLetter):").Self.Name=$PSItem.Label

			}elseif ($PSItem.GroupFilter -eq $null) {

				Write-Output "Mapping network drive $($PSItem.Path)"

				$null = New-PSDrive -PSProvider FileSystem -Name $PSItem.DriveLetter -Root $PSItem.Path -Description $PSItem.Label -Persist -Scope global -EA SilentlyContinue

				(New-Object -ComObject Shell.Application).NameSpace("$($PSItem.DriveLetter):").Self.Name=$PSItem.Label
			}
		}else{

			Write-Output "Drive already exists with same DriveLetter and Path"
		}
	}catch{

		Write-Warning $_.Exception.Message
	}
}
###########################################################################################
# End & finish transcript																  #
###########################################################################################

Stop-transcript

###########################################################################################
# Done																					  #
###########################################################################################

#!SCHTASKCOMESHERE!#

###########################################################################################
# If this script is running under system (IME) scheduled task is created  (recurring)	  #
###########################################################################################

Start-Transcript -Path $(Join-Path -Path $env:temp -ChildPath "IntuneDriveMappingScheduledTask.log")

if ($(whoami -user) -match "S-1-5-18"){

	Write-Output "Running as System --> creating scheduled task which will run on user logon"

	###########################################################################################
	# Get the current script path and content and save it to the client						  #
	###########################################################################################

	$currentScript= Get-Content -Path $($PSCommandPath)

	$schtaskScript=$currentScript[(0) .. ($currentScript.IndexOf("#!SCHTASKCOMESHERE!#") -1)]

	$scriptSavePath=$(Join-Path -Path $env:ProgramData -ChildPath "intune-drive-mapping-generator")

	if (-not (Test-Path $scriptSavePath)){

		New-Item -ItemType Directory -Path $scriptSavePath -Force
	}

	$scriptSavePathName="DriveMappping.ps1"

	$scriptPath= $(Join-Path -Path $scriptSavePath -ChildPath $scriptSavePathName)

	$schtaskScript | Out-File -FilePath $scriptPath -Force

	###########################################################################################
	# Create dummy vbscript to hide PowerShell Window popping up at logon					  #
	###########################################################################################

	$vbsDummyScript = "
	Dim shell,fso,file

	Set shell=CreateObject(`"WScript.Shell`")
	Set fso=CreateObject(`"Scripting.FileSystemObject`")

	strPath=WScript.Arguments.Item(0)

	If fso.FileExists(strPath) Then
		set file=fso.GetFile(strPath)
		strCMD=`"powershell -nologo -executionpolicy ByPass -command `" & Chr(34) & `"&{`" &_
		file.ShortPath & `"}`" & Chr(34)
		shell.Run strCMD,0
	End If
	"

	$scriptSavePathName="IntuneDriveMapping-VBSHelper.vbs"

	$dummyScriptPath= $(Join-Path -Path $scriptSavePath -ChildPath $scriptSavePathName)

	$vbsDummyScript | Out-File -FilePath $dummyScriptPath -Force

	$wscriptPath = Join-Path $env:SystemRoot -ChildPath "System32\wscript.exe"

	###########################################################################################
	# Register a scheduled task to run for all users and execute the script on logon		  #
	###########################################################################################

	$schtaskName= "IntuneDriveMapping"
	$schtaskDescription="Map network drives from intune-drive-mapping-generator."

	$trigger = New-ScheduledTaskTrigger -AtLogOn
	#Execute task in users context
	$principal= New-ScheduledTaskPrincipal -GroupId "S-1-5-32-545" -Id "Author"
	#call the vbscript helper and pass the PosH script as argument
	$action = New-ScheduledTaskAction -Execute $wscriptPath -Argument "`"$dummyScriptPath`" `"$scriptPath`""
	$settings= New-ScheduledTaskSettingsSet -AllowStartIfOnBatteries -DontStopIfGoingOnBatteries

	$null=Register-ScheduledTask -TaskName $schtaskName -Trigger $trigger -Action $action  -Principal $principal -Settings $settings -Description $schtaskDescription -Force

	Start-ScheduledTask -TaskName $schtaskName
}

Stop-Transcript

###########################################################################################
# Done																					  #
###########################################################################################