$ErrorActionPreference= 'silentlycontinue'
#pcvisit install
New-Item -Type Directory C:\_support
#Invoke-WebRequest -Uri "http://install.haskii.de/pcvisit_RemoteHost_15_Setup.exe" -OutFile c:\_support\pcvisit_RemoteHost_15_Setup.exe
#c:\_support\pcvisit_RemoteHost_15_Setup.exe /CompanyAccountId=2137928159 /S /UseCompanyPreset

#Datum Uhrzeit
$ntpserver1 = "time.windows.com"
$ntpserver2 = "ca.pool.ntp.org"
Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\DateTime\Servers" -Name 1  -Value $ntpserver1
Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\DateTime\Servers" -Name 2  -Value $ntpserver2

#Updates Sonntag 12Uhr
Set-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU\" -Name AUoptions  -Value "3"
Set-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU\" -Name ScheduledInstallDay  -Value "1"
Set-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU\" -Name ScheduledInstallTime  -Value "12"

#RDP On
(Get-WmiObject Win32_TerminalServiceSetting -Namespace root\cimv2\TerminalServices).SetAllowTsConnections(1,1)| out-null
(Get-WmiObject -Class "Win32_TSGeneralSetting" -Namespace root\cimv2\TerminalServices -Filter "TerminalName='RDP-tcp'").SetUserAuthenticationRequired(0)| out-null

#Firewall
Enable-NetFirewallRule -DisplayGroup "RemoteDesktop"
Enable-NetFirewallRule -Group "@FirewallAPI.dll,-28502"

#Password Policy
Set-LocalUser -Name Administrator -PasswordNeverExpires $true

#Disable ServerManager
Get-ScheduledTask -TaskName ServerManager | Disable-ScheduledTask -Verbose


#Wait 10 Sec for UserInput
$secondsRunning = 0;
Write-Output "Enter Computername:"
while( (-not $Host.UI.RawUI.KeyAvailable) -and ($secondsRunning -lt 10) ){
    Start-Sleep -Seconds 1
    $secondsRunning++
}

# UserInput
if ($Host.UI.RawUI.KeyAvailable) {
	$computername1 = Read-Host
#Get-Domain
	$domain =  (gwmi win32_NetworkAdapterConfiguration).DNSDomain |where {$_ -ne $Null}
	$menu = @{}
	if($domain.count -ge 2){ 
	for ($i=1;$i -le $domain; $i++) {
 	   Write-Host "
	$domain[$i]
	"
  	  $menu.Add($i,($domain[$i-1])) }
	[int]$ans = Read-Host 'Enter selection'
	$selection = $menu.Item($ans) }

	$username = "Administrator@$domain"
	$password1 = Read-Host "Join Domain $domain? 
Enter Password Administrator@$domain" -AsSecureString 
	$password2 = Read-Host 'Set local Administrator (support) Password' | ConvertTo-SecureString -asPlainText -Force
	$credential = New-Object System.Management.Automation.PSCredential($username,$password1)
	New-localUser -Name support -Password $password2
	Add-LocalGroupMember -Group Administratoren -Member support
	sleep 3
	Add-Computer -DomainName "$domain" -Credential $credential -Force -PassThru 
	$Computer = Get-WmiObject Win32_ComputerSystem
	$r = $Computer.Rename($computername1, $credential.GetNetworkCredential().Password, $credential.Username)
	$r
} 


#Updates
Set-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU -Name UseWUServer -Value 0
Set-Service -Name wuauserv -StartupType Automatic
Restart-Service wuauserv
Install-PackageProvider -Name NuGet -force |out-null
Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Scope LocalMachine -force
Install-Module -Name PSWindowsUpdate -Confirm:$false -force
Get-WUInstall -AcceptAll -MicrosoftUpdate -Install -IgnoreReboot |ft 
#-Verbose


#winget
New-Item -Type Directory C:\_support\work
$ProgressPreference = 'SilentlyContinue'
[Net.ServicePointManager]::SecurityProtocol = 'Ssl3, Tls, Tls11, Tls12'
Invoke-WebRequest -Uri "https://globalcdn.nuget.org/packages/microsoft.ui.xaml.2.7.0.nupkg" -OutFile c:\_support\work\microsoft.ui.xaml.2.7.0.zip
Expand-Archive c:\_support\work\microsoft.ui.xaml.2.7.0.zip -DestinationPath c:\_support\work
Add-AppxPackage -Path C:\_support\work\tools\AppX\x64\Release\Microsoft.UI.Xaml.2.7.appx
Add-AppxPackage -Path "https://aka.ms/Microsoft.VCLibs.x64.14.00.Desktop.appx"
$releases_url = "https://api.github.com/repos/microsoft/winget-cli/releases/latest"
$releases = Invoke-RestMethod -uri "$($releases_url)"
$latestRelease = $releases.assets | Where { $_.browser_download_url.EndsWith("msixbundle") } | Select -First 1
Add-AppxPackage -Path $latestRelease.browser_download_url
Invoke-WebRequest -Uri https://winget.azureedge.net/cache/source.msix -outfile C:\_support\work\source.msix
Add-AppPackage C:\_support\work\source.msix

#install packages
winget install Microsoft.VC++2005Redist-x86 --silent --accept-package-agreements --accept-source-agreements
winget install Microsoft.VC++2005Redist-x64 --silent --accept-package-agreements --accept-source-agreements
winget install Microsoft.VC++2008Redist-x86 --silent --accept-package-agreements --accept-source-agreements
winget install Microsoft.VC++2008Redist-x64 --silent --accept-package-agreements --accept-source-agreements
winget install Microsoft.VC++2010Redist-x86 --silent --accept-package-agreements --accept-source-agreements
winget install Microsoft.VC++2010Redist-x64 --silent --accept-package-agreements --accept-source-agreements
winget install Microsoft.VC++2012Redist-x86 --silent --accept-package-agreements --accept-source-agreements
winget install Microsoft.VC++2012Redist-x64 --silent --accept-package-agreements --accept-source-agreements
winget install Microsoft.VC++2013Redist-x86 --silent --accept-package-agreements --accept-source-agreements
winget install Microsoft.VC++2013Redist-x64 --silent --accept-package-agreements --accept-source-agreements
winget install Microsoft.VC++2015-2022Redist-x86 --silent --accept-package-agreements --accept-source-agreements
winget install Microsoft.VC++2015-2022Redist-x64 --silent --accept-package-agreements --accept-source-agreements
winget install Microsoft.dotNetFramework --silent --accept-package-agreements --accept-source-agreements
winget install Microsoft.PowerShell --silent --accept-package-agreements --accept-source-agreements

winget install 7zip.7zip --silent --accept-package-agreements --accept-source-agreements
winget install Mozilla.Firefox --silent --accept-package-agreements --accept-source-agreements
winget install BraveSoftware.BraveBrowser --silent --accept-package-agreements --accept-source-agreements
winget install Google.Chrome --silent --accept-package-agreements --accept-source-agreements
winget install ESET.EndpointAntivirus --silent --accept-package-agreements --accept-source-agreements
winget install Adobe.Acrobat.Reader.64-bit --silent --accept-package-agreements --accept-source-agreements
winget install geeksoftwareGmbH.PDF24Creator --silent --accept-package-agreements --accept-source-agreements
winget install TrackerSoftware.PDF-XChangeEditor --silent --accept-package-agreements --accept-source-agreements
winget install SonicWALL.NetExtender --silent --accept-package-agreements --accept-source-agreements

rem winget install Microsoft.Teams
rem winget install Microsoft.Office

rem winget install 9WZDNCRFJ4MV

#diable admins
#Enable-localUser support
#$password = "password" | ConvertTo-SecureString -asPlainText -Force
#New-localUser -Name support -Password $password
#Add-LocalGroupMember -Group Administratoren -Member support
#Enable-localUser support
Get-localUser | Where-Object {$_.Name -ne "support"} | Disable-localUser


restart-computer