#=============================================================================================================================
#
# Script Name:  Remediate_local_kioskuser_autologon.ps1
# Description:  Agrega el usuario kioskUser0 al grupo de Usuarios locales del puesto y crea las claves de Autologon necesarias
#
#=============================================================================================================================

# Modules
Import-Module Microsoft.Powershell.LocalAccounts

# Define Variables
$userName = "kioskUser0"
$password = ConvertTo-SecureString $userName -AsPlainText -Force
$groupName = "Usuarios"
$userDescription = "Usuario Quiosco"

class RegKeys {
    [String]$Path
    [String]$Name
    [String]$ExpectedValue
}

$AutologonRegKeys = @(
    [RegKeys]@{ Path = 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon';   Name = 'AutoAdminLogon';    ExpectedValue = "1"}
    [RegKeys]@{ Path = 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon';   Name = 'DefaultDomainName'; ExpectedValue = "."}
    [RegKeys]@{ Path = 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon';   Name = 'DefaultUserName';   ExpectedValue = "$($userName)"}
    [RegKeys]@{ Path = 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon';   Name = 'DefaultPassword';   ExpectedValue = "$($userName)"}
)

try {
    # Create user if it doesn't exist
    try {
        Get-LocalUser $userName -EA Stop | Out-Null
        Set-LocalUser -Name $userName -AccountNeverExpires -Description $userDescription -Password $password -PasswordNeverExpires:$true -UserMayChangePassword:$false -EA Continue | Out-Null
        Add-LocalGroupMember -SID S-1-5-32-546 -Member $userName -EA Continue # Miembro de Guests
        Remove-LocalGroupMember -SID S-1-5-32-545 -Member $userName -EA Continue # No sea miembro de Users
        Write-Host "User OK: [$userName] ya estaba creado. Se ha configurado."
    } catch [Microsoft.PowerShell.Commands.UserNotFoundException] {
        New-LocalUser -Name $userName -AccountNeverExpires -Description $userDescription -Password $password -PasswordNeverExpires -UserMayNotChangePassword -EA Stop | Out-Null
        Add-LocalGroupMember -SID S-1-5-32-546 -Member $userName -EA Continue# Miembro de Guests
        Remove-LocalGroupMember -SID S-1-5-32-545 -Member $userName -EA Continue # No sea miembro de Users
        Write-Host "User OK: [$userName] creado"
    }

    # Create autologon registry keys
    $AutologonRegKeys.GetEnumerator() | Foreach-Object {
        $path = $_.Path
        $name = $_.Name
        $expectedValue = $_.ExpectedValue

        Set-ItemProperty -Path $path -Name $name -Value $expectedValue -Type String -Force -EA Stop
        Write-Host "RegKEY OK: Clave [$path][$name] creada con valor [$expectedValue]"
    }

    #Exit 0 for Intune, OK
    Write-Host "OK"
    exit 0
} catch {
    Write-Error $_.Exception.Message
    exit 1
}