@mparlette Why thank you good sir =)
I keep meaning to update some pieces of that module but keep not having time.
But anyway, I have been using the api via powershell for AD stuff since I made it
I don’t have time to delve deep into an explanation right now but here’s a quick code example that I use to create an OU string based on the fog group name and then add the domain join info. It doesn’t all use my api as it and could use some optimization but it works as it is so I haven’t updated it yet. But the invoke-fogapi command I believe is the same as in the module published in the powershell gallery. So it can work together.
Though another quick note, it looks like the OP’s error message is saying AD is disabled on the server. Make sure that it isn’t actually disabled. YOu can also try resetting the encryption data on the client.
function Set-FogOU {
[CmdletBinding()]
param (
[string]$jsonData,
$hostObj,
[string]$OUstr
)
begin {
if($null -eq $hostObj) {
Write-Verbose 'no host given, getting current host...';
$hostObj = Get-FogHost
}
Write-Verbose 'getting fog group...';
$group = Get-FogGroup $hostObj.id;
if ($group.name -match 'wks' -OR $group.name -match 'TS') {
if ($null -eq $OUstr -OR $OUstr -eq "") {
Write-Verbose 'checking if group is domain group'
$OUstr = Get-OUStr -group $group;
}
Write-Verbose "OU string is $OUstr, setting to properties of host object, also enabling and enforcing domain join...";
$hostObj.ADOU = $OUstr;
$hostObj.useAD = 1;
$hostObj.enforce = 1;
}
else { #group name doesn't have wks in it so don't join the domain
Write-Verbose "Group name $($group.name) is not a domain group, setting fog to not join the domain, but still restart to name the computer...";
$hostObj.ADOU = "";
$hostObj.useAD = 0;
$hostObj.enforce = 1;
}
Write-Verbose 'creating json string from new host ou settings...';
$jsonData = $hostObj | Select-Object id,ADOU,useAD,enforce | ConvertTo-Json;
}
process {
Write-Verbose "Setting $($hostObj.name)'s OU settings to $jsonData";
$newHost = Invoke-FogApi -Method 'Put' -uriPath "host/$($hostObj.id)/edit" -jsonData $jsonData;
}
end {
Write-Verbose "OU and AD settings have been set for $($newHost.name)";
Write-Verbose 'host settings are now...';
$newHost | Select-Object id,name,ADOU,useAD,enforce
return;
}
}
function Get-OUStr {
[CmdletBinding()]
param (
$group,
$OUstr = ''
)
begin {
# $OUstr = "";
Write-Verbose "getting OUstring for group $($group.name)";
}
process {
if ($group.name -match 'wks' -OR $group.name -match 'TS') {
Write-Verbose 'group should be in an OU, creating OU string from group name or using given string...';
if ($null -ne $OUstr -AND $OUstr -ne "") {
Write-Verbose 'using given ouString'
$OUstr = $OUstr;
}
else {
Write-Verbose 'creating wks ou string';
$OUstr = "OU=$($group.name),OU=Desktop,OU=Workstations,DC=domain,DC=com";
}
Write-Verbose "OU string is $OUstr, setting to properties of host object, also enabling and enforcing domain join...";
}
}
end {
return $OUstr;
}
}
function Get-FogHost {
[CmdletBinding()]
param (
[string]$uuid,
[string]$hostName,
[string]$macAddr
)
begin {
[bool]$found = $false;
Write-Verbose 'Checking for passed variables'
if (!$uuid -and !$hostName -and !$macAddr) {
Write-Verbose 'no params given, getting current computer variables';
$uuid = (Get-WmiObject Win32_ComputerSystemProduct).UUID;
$macAddr = ((Get-NetAdapter | Select-Object MacAddress)[0].MacAddress).Replace('-',':');
$hostName = $(hostname);
}
Write-Verbose 'getting all hosts to search...';
$hosts = (Invoke-FogApi).hosts;
Write-Verbose "search terms: uuid is $uuid, macAddr is $macAddr, hostname is $hostName";
}
process {
Write-Verbose 'finding host in hosts';
[bool]$found = $false;
$hostObj = $hosts | Where-Object {
($uuid -ne "" -AND $_.inventory.sysuuid -eq $uuid) -OR `
($hostName -ne "" -AND $_.name -eq $hostName) -OR `
($macAddr -ne "" -AND $_.macs -contains $macAddr);
if ($uuid -ne "" -AND $_.inventory.sysuuid -eq $uuid) {
Write-Verbose "$($_.inventory.sysuuid) matches the uuid $uuid`! host found";
$found = $true;
}
if ($macAddr -ne "" -AND $_.macs -contains $macAddr) {
Write-Verbose "$($_.macs) matches the macaddress $macAddr`! host found";
$found = $true;
}
if ($hostName -ne "" -AND $_.name -eq $hostName) {
Write-Verbose "$($_.name) matches the hostname $hostName`! host found";
$found = $true;
}
}
}
end {
if ($found){
return $hostObj;
}
return $found; #return false if host not found
}
}
function Get-FogGroup {
<#
.SYNOPSIS
needs to return the group name of the group that isn't the everyone group
will use groupassociation call to get group id then group id to get group name from group uriPath
.DESCRIPTION
requires the id of the host you want the groups that aren't the everyone group for
#>
[CmdletBinding()]
param (
[int]$hostId
)
begin {
[bool]$found = $false;
Write-Verbose 'Getting all fog group associations...';
$groupAssocs = (Invoke-FogApi -uriPath groupassociation).groupassociations;
Write-Verbose 'Getting all fog groups...';
$groups = (Invoke-FogApi -uriPath group).groups;
}
process {
Write-Verbose "Finding group association for hostid of $hostId";
$hostGroups = $groupAssocs | Where-Object hostID -eq $hostId;
Write-Verbose "filtering out everyone and touchscreen group";
$hostGroups = $hostGroups | Where-Object groupID -ne 3; #groupID 3 is the everyone group, don't include that
$hostGroups = $hostGroups | Where-Object groupID -ne 11; #groupID 11 is the wkstouchscreens group, don't include that either
Write-Verbose "finding group that matches group id of $hostGroups...";
$group = $groups | Where-Object id -eq $hostGroups.groupID;
Write-Verbose 'checking if group was found...';
if($null -ne $group -AND $group -ne "") { $found = $true; Write-Verbose 'group found!'}
}
end {
if($found){
return $group;
}
return $found;
}
}
Set-FogOU -verbose
Hope that helps
