The first script in my new library is one that I am quite proud of as it was the first that I created to solve a relatively complex problem. It came to be because of the Music department at the college that I work at. The PCs in their department have external USB sound cards for students to plug MIDI instruments into and other such things (Hell, I’m not a musician, I don’t understand what they’re for exactly!). The problem was that Sonar, the music sequencing software that they use, was giving them trouble when both the on-board audio and the USB device was enabled. They therefore wanted me to disable the on-board sound card in the machines so that it wouldn’t happen again.
I could have gone to each of their PCs and just disabled the onboard sound in the BIOS or in Windows but that would be a short term fix; if the PC got replaced or rebuilt the person doing that would have to remember to disable it again. I therefore wrote this:
$SoundDevices = Get-CimInstance Win32_SoundDevice
if ($SoundDevices.DeviceID -like "USB*")
#USB Sound Card detected, will now check to see if on-board HDAUDIO is still active
$HDAudio = Get-CimInstance Win32_SoundDevice -Filter ‘DeviceID LIKE "HDAUDIO%"’
$AudioStatus = $HDAudio.StatusInfo
If ($AudioStatus -eq ‘3’)
#On-board still active, need to disable
echo "USB Audio detected, on-board audio needs to be disabled"
#USB detected, on-board disabled
#No USB, onboard sound to be left alone
This script queries WMI to find out what sound devices are installed in the machine. If it detects one with USB in the device string, it goes on to see if the onboard HDAUDIO device is enabled. If it is, it sends a string back to ConfigMgr saying that remediation needs to happen. If the on-board is disabled it sends “OK” back to ConfigMgr. If there is no USB audio device installed at all, it sends “OK back to ConfigMgr.
The remediation script is quite simple. Since these are Windows 7 machines, there is no PowerShell way of managing hardware. I therefore had to use the old DEVCON command. The remediation script therefore looks like this:
[code]%Path_to_file%\devcon.exe disable HDAUDIO\*[/code]
That disables any device with HDAUDIO at the beginning of its device ID.
Set the compliance rule on the DCM script to look for a string that says “OK” and that’s it. Then add the rule to a existing baseline or create a new one and deploy it to a collection.