Community
 
 
 

Radia - General Discussions

1323フォロワー
 
Avatar
Tony Rodal

Export policy and assigning edm policy in powershell

Hi, I'm fairly new to PowerShell but I was wondering if anyone has had success exporting the software policy and then being able to assign a package to an AD group? Thanks for any help in advance.

2件のコメント
0

サインインしてコメントを残してください。

 
 

Previous 2件のコメント

Avatar
enterprise.services

Exporting and then importing software can done using the command line utility RADDBUTIL.EXE found in the configuration serer folder  [example C:\PROGRA~2\psl\rca\CONFIG~1]
This creates 4 files (information *.XPI, resources *.XPR. log *.LOG, class structure *.XPC) . A non 0 exit code less than 8 like 4 is considered a warning (like nothing to delete).

If you are exporting from a lab environment for import to production there a few steps I keep in mind.

1) Export in the Lab.  Delete or rename the exported .XPC file (to prevent importing class changes from your lab into production).

2) Export in Production. (Make a backup and an XPI used for delete command)

3) Delete in Production.

4) Import in Production.

Export example for "SAMPLE":

[raddbutil.exe export -walk 1 -logfile "C:\PROGRA~2\psl\rca\CONFIG~1\EXPORT\SOFTWARE\ZSERVICE\SAMPLE_EXPORT.log" -data 1 -loglvl 3 -logmode a -output "C:\PROGRA~2\psl\rca\CONFIG~1\EXPORT\SOFTWARE\ZSERVICE\SAMPLE" PRIMARY.SOFTWARE.ZSERVICE.SAMPLE]

Prior to importing its a good idea to export and delete first (in case it already exists).

Example delete, using the backup xpi:

raddbutil.exe delete -walk 1 -logfile "C:\PROGRA~2\psl\rca\CONFIG~1\EXPORT\SOFTWARE\ZSERVICE\SAMPLE_DELETE.log" -loglvl 3 -logmode a -file "C:\PROGRA~2\psl\rca\CONFIG~1\EXPORT\SOFTWARE\ZSERVICE\SAMPLE.xpi

Example import:

 raddbutil.exe import -accept a+u+s -logfile "C:\PROGRA~2\psl\rca\CONFIG~1\EXPORT\SOFTWARE\ZSERVICE\SAMPLE_IMPORT.log" -loglvl 3 -logmode a -domain SOFTWARE:reuse -commit 1 -input "C:\PROGRA~2\psl\rca\CONFIG~1\EXPORT\SOFTWARE\ZSERVICE\SAMPLE"

As for creating software entitlement groups in AD with Powershell, this can be done with the powershell ActiveDirectory module which can be enabled in Windows found in the RSAT AD-DS Powershell.

Create an AD group

$EntitledGroup = "RA-Example AD group";
$descriptionvalue = "group description example";
$notesvalue = "Example notes value";
$entitled = "+SOFTWARE/SAMPLE";

$null =  new-psdrive -name RadiaGroups -psprovider ActiveDirectory -root "OU=RadiaGroups,DC=contoso,DC=dev" -server dc1 -Credential $cred;
set-location -path RadiaGroups:

new-adgroup -groupscope global -groupcategory Security -name $EntitledGroup -samaccountname $EntitledGroup -displayname $EntitledGroup;
set-adgroup -identity $EntitledGroup -description $descriptionvalue -ErrorAction Stop -replace @{
    info=$notesvalue
    edmPolicy="$entitled"
};

** Provided as is with no guarantees **

コメントアクション パーマリンク
Avatar
Brandon Stevens

Top Contributors