Merge pull request #6436 from aczechowski/cz-2111cb-powershell

2111 CB PowerShell

Author: jborsecnik

memdocs/configmgr/apps/deploy-use/create-deploy-scripts.md

@@ -2,7 +2,7 @@
 title: Create and run scripts
 titleSuffix: Configuration Manager
 description: Create and run PowerShell scripts on client devices.
-ms.date: 04/30/2020
+ms.date: 12/28/2021
 ms.prod: configuration-manager
 ms.technology: configmgr-app
 ms.topic: conceptual
@@ -328,6 +328,18 @@ Microsoft Windows 10 Enterprise
 - On the site server, by default in C:\Program Files\Configuration Manager\Logs:
   - **SMS_Message_Processing_Engine.log**
 
+## Automate with Windows PowerShell
+
+You can use the following PowerShell cmdlets to automate some of these tasks:
+
+- [Approve-CMScript](/powershell/module/configurationmanager/approve-cmscript)
+- [Deny-CMScript](/powershell/module/configurationmanager/deny-cmscript)
+- [Get-CMScript](/powershell/module/configurationmanager/get-cmscript)
+- [Invoke-CMScript](/powershell/module/configurationmanager/invoke-cmscript)
+- [New-CMScript](/powershell/module/configurationmanager/new-cmscript)
+- [Remove-CMScript](/powershell/module/configurationmanager/remove-cmscript)
+- [Set-CMScript](/powershell/module/configurationmanager/set-cmscript)
+
 ## See Also
 
 - [Configure role-based administration for Configuration Manager](../../core/servers/deploy/configure/configure-role-based-administration.md)

memdocs/configmgr/apps/deploy-use/revise-and-supersede-applications.md

@@ -2,7 +2,7 @@
 title: Revise and supersede applications
 titleSuffix: Configuration Manager
 description: Learn how to work with Configuration Manager application versions and supersede applications.
-ms.date: 11/24/2020
+ms.date: 12/16/2021
 ms.prod: configuration-manager
 ms.technology: configmgr-app
 ms.topic: how-to
@@ -128,6 +128,13 @@ The end result is that all deployments of the main application use the new depen
 
 This action shows a graphical diagram of the relationships of the selected application to other applications. For the supersedence relationships, it shows applications that the selected application supersedes, and applications that the selected application is superseded by.
 
+### Manage supersedence with PowerShell
+
+You can add, view, and remove supersedence relationships using the following PowerShell cmdlets:
+
+- [Get-CMDeploymentTypeSupersedence](/powershell/module/configurationmanager/get-cmdeploymenttypesupersedence)
+- [Set-CMApplicationSupersedence](/powershell/module/configurationmanager/set-cmapplicationsupersedence)
+
 ## Next steps
 
 [Uninstall applications](uninstall-applications.md)

memdocs/configmgr/core/clients/manage/collections/manage-collections.md

@@ -272,35 +272,102 @@ Other improvements:
 
 For more information on how to navigate the collection dependency graph with a keyboard, see [Accessibility features](../../../understand/accessibility-features.md#collection-relationship-diagram-shortcuts).
 
-## PowerShell
+## Automate with Windows PowerShell
 
-You can also use PowerShell to manage collections. For more information, see the following articles:
+You can use the following PowerShell cmdlets to manage collections:
+
+### Generic cmdlets for all collection types
+
+#### Basic cmdlets
 
 - [Get-CMCollection](/powershell/module/configurationmanager/get-cmcollection)
-- [Set-CMCollection](/powershell/module/configurationmanager/set-cmcollection)
 - [New-CMCollection](/powershell/module/configurationmanager/new-cmcollection)
-- [Copy-CMCollection](/powershell/module/configurationmanager/copy-cmcollection)
 - [Remove-CMCollection](/powershell/module/configurationmanager/remove-cmcollection)
-- [Import-CMCollection](/powershell/module/configurationmanager/import-cmcollection)
+- [Set-CMCollection](/powershell/module/configurationmanager/set-cmcollection)
+
+#### Other actions
+
+- [Copy-CMCollection](/powershell/module/configurationmanager/copy-cmcollection)
 - [Export-CMCollection](/powershell/module/configurationmanager/export-cmcollection)
 - [Get-CMCollectionMember](/powershell/module/configurationmanager/get-cmcollectionmember)
 - [Get-CMCollectionSetting](/powershell/module/configurationmanager/get-cmcollectionsetting)
+- [Import-CMCollection](/powershell/module/configurationmanager/import-cmcollection)
 - [Invoke-CMCollectionUpdate](/powershell/module/configurationmanager/invoke-cmcollectionupdate)
-- [Add-CMCollectionMembershipRule](/powershell/module/configurationmanager/add-cmcollectionmembershiprule)
-- [Set-CMCollectionPowerManagement](/powershell/module/configurationmanager/set-cmcollectionpowermanagement)
-- [Get-CMCollectionMembershipRule](/powershell/module/configurationmanager/get-cmcollectionmembershiprule)
-- [Remove-CMCollectionMembershipRule](/powershell/module/configurationmanager/remove-cmcollectionmembershiprule)
+
+#### Get membership rules
+
 - [Get-CMCollectionDirectMembershipRule](/powershell/module/configurationmanager/get-cmcollectiondirectmembershiprule)
-- [Get-CMCollectionQueryMembershipRule](/powershell/module/configurationmanager/get-cmcollectionquerymembershiprule)
+- [Get-CMCollectionExcludeMembershipRule](/powershell/module/configurationmanager/get-cmcollectionexcludemembershiprule)
 - [Get-CMCollectionIncludeMembershipRule](/powershell/module/configurationmanager/get-cmcollectionincludemembershiprule)
-- [Add-CMCollectionToAdministrativeUser](/powershell/module/configurationmanager/add-cmcollectiontoadministrativeuser)
-- [Remove-CMCollectionQueryMembershipRule](/powershell/module/configurationmanager/remove-cmcollectionquerymembershiprule)
+- [Get-CMCollectionQueryMembershipRule](/powershell/module/configurationmanager/get-cmcollectionquerymembershiprule)
+
+#### Remove membership rules
+
 - [Remove-CMCollectionDirectMembershipRule](/powershell/module/configurationmanager/remove-cmcollectiondirectmembershiprule)
-- [Get-CMCollectionExcludeMembershipRule](/powershell/module/configurationmanager/get-cmcollectionexcludemembershiprule)
-- [Add-CMCollectionToDistributionPointGroup](/powershell/module/configurationmanager/add-cmcollectiontodistributionpointgroup)
-- [Remove-CMCollectionIncludeMembershipRule](/powershell/module/configurationmanager/remove-cmcollectionincludemembershiprule)
 - [Remove-CMCollectionExcludeMembershipRule](/powershell/module/configurationmanager/remove-cmcollectionexcludemembershiprule)
-- [Remove-CMCollectionFromAdministrativeUser](/powershell/module/configurationmanager/remove-cmcollectionfromadministrativeuser)
+- [Remove-CMCollectionIncludeMembershipRule](/powershell/module/configurationmanager/remove-cmcollectionincludemembershiprule)
+- [Remove-CMCollectionQueryMembershipRule](/powershell/module/configurationmanager/remove-cmcollectionquerymembershiprule)
+
+### Device collection-specific cmdlets
+
+#### Basic actions for device collections
+
+- [Get-CMDeviceCollection](/powershell/module/configurationmanager/get-cmdevicecollection)
+- [New-CMDeviceCollection](/powershell/module/configurationmanager/new-cmdevicecollection)
+
+#### Device collection variables
+
+- [Get-CMDeviceCollectionVariable](/powershell/module/configurationmanager/get-cmdevicecollectionvariable)
+- [New-CMDeviceCollectionVariable](/powershell/module/configurationmanager/new-cmdevicecollectionvariable)
+- [Remove-CMDeviceCollectionVariable](/powershell/module/configurationmanager/remove-cmdevicecollectionvariable)
+- [Set-CMDeviceCollectionVariable](/powershell/module/configurationmanager/set-cmdevicecollectionvariable)
+
+#### Add device collection membership rules
+
+- [Add-CMDeviceCollectionDirectMembershipRule](/powershell/module/configurationmanager/add-cmdevicecollectiondirectmembershiprule)
+- [Add-CMDeviceCollectionExcludeMembershipRule](/powershell/module/configurationmanager/add-cmdevicecollectionexcludemembershiprule)
+- [Add-CMDeviceCollectionIncludeMembershipRule](/powershell/module/configurationmanager/add-cmdevicecollectionincludemembershiprule)
+- [Add-CMDeviceCollectionQueryMembershipRule](/powershell/module/configurationmanager/add-cmdevicecollectionquerymembershiprule)
+
+#### Get device collection membership rules
+
+- [Get-CMDeviceCollectionDirectMembershipRule](/powershell/module/configurationmanager/get-cmdevicecollectiondirectmembershiprule)
+- [Get-CMDeviceCollectionExcludeMembershipRule](/powershell/module/configurationmanager/get-cmdevicecollectionexcludemembershiprule)
+- [Get-CMDeviceCollectionIncludeMembershipRule](/powershell/module/configurationmanager/get-cmdevicecollectionincludemembershiprule)
+- [Get-CMDeviceCollectionQueryMembershipRule](/powershell/module/configurationmanager/get-cmdevicecollectionquerymembershiprule)
+
+#### Remove device collection membership rules
+
+- [Remove-CMDeviceCollectionDirectMembershipRule](/powershell/module/configurationmanager/remove-cmdevicecollectiondirectmembershiprule)
+- [Remove-CMDeviceCollectionExcludeMembershipRule](/powershell/module/configurationmanager/remove-cmdevicecollectionexcludemembershiprule)
+- [Remove-CMDeviceCollectionIncludeMembershipRule](/powershell/module/configurationmanager/remove-cmdevicecollectionincludemembershiprule)
+- [Remove-CMDeviceCollectionQueryMembershipRule](/powershell/module/configurationmanager/remove-cmdevicecollectionquerymembershiprule)
+
+### User collection-specific cmdlets
+
+- [Get-CMUserCollection](/powershell/module/configurationmanager/get-cmusercollection)
+- [New-CMUserCollection](/powershell/module/configurationmanager/new-cmusercollection)
+
+#### Add user collection membership rules
+
+- [Add-CMUserCollectionDirectMembershipRule](/powershell/module/configurationmanager/add-cmusercollectiondirectmembershiprule)
+- [Add-CMUserCollectionExcludeMembershipRule](/powershell/module/configurationmanager/add-cmusercollectionexcludemembershiprule)
+- [Add-CMUserCollectionIncludeMembershipRule](/powershell/module/configurationmanager/add-cmusercollectionincludemembershiprule)
+- [Add-CMUserCollectionQueryMembershipRule](/powershell/module/configurationmanager/add-cmusercollectionquerymembershiprule)
+
+#### Get user collection membership rules
+
+- [Get-CMUserCollectionDirectMembershipRule](/powershell/module/configurationmanager/get-cmusercollectiondirectmembershiprule)
+- [Get-CMUserCollectionExcludeMembershipRule](/powershell/module/configurationmanager/get-cmusercollectionexcludemembershiprule)
+- [Get-CMUserCollectionIncludeMembershipRule](/powershell/module/configurationmanager/get-cmusercollectionincludemembershiprule)
+- [Get-CMUserCollectionQueryMembershipRule](/powershell/module/configurationmanager/get-cmusercollectionquerymembershiprule)
+
+#### Remove user collection membership rules
+
+- [Remove-CMUserCollectionDirectMembershipRule](/powershell/module/configurationmanager/remove-cmusercollectiondirectmembershiprule)
+- [Remove-CMUserCollectionExcludeMembershipRule](/powershell/module/configurationmanager/remove-cmusercollectionexcludemembershiprule)
+- [Remove-CMUserCollectionIncludeMembershipRule](/powershell/module/configurationmanager/remove-cmusercollectionincludemembershiprule)
+- [Remove-CMUserCollectionQueryMembershipRule](/powershell/module/configurationmanager/remove-cmusercollectionquerymembershiprule)
 
 ## Next steps
 

memdocs/configmgr/core/servers/deploy/configure/configure-role-based-administration.md

@@ -2,7 +2,7 @@
 title: Configure role-based administration
 titleSuffix: Configuration Manager
 description: Combine security roles, security scopes, and assigned collections to define the administrative scope for each administrative user.
-ms.date: 04/15/2021
+ms.date: 12/21/2021
 ms.prod: configuration-manager
 ms.technology: configmgr-core
 ms.topic: how-to
@@ -283,6 +283,51 @@ Use the following procedure to modify an administrative user that has the secura
     > [!CAUTION]  
     > When a security role grants administrative users the collection deployment permission, those administrative users can distribute objects from any security scope for which they have object **read** permissions, even if that security scope is associated with a different security role.  
 
+## Automate with Windows PowerShell
+
+You can use the following PowerShell cmdlets to automate some of these tasks:
+
+Manage administrative users:
+
+- [Get-CMAdministrativeUser](/powershell/module/configurationmanager/Get-CMAdministrativeUser): Get an administrative user object.
+- [New-CMAdministrativeUser](/powershell/module/configurationmanager/New-CMAdministrativeUser): Create a new administrative user.
+- [New-CMAdministrativeUserPermission](/powershell/module/configurationmanager/New-CMAdministrativeUserPermission): {{ Fill in the Synopsis }}
+- [Remove-CMAdministrativeUser](/powershell/module/configurationmanager/Remove-CMAdministrativeUser): Remove an administrative user.
+
+Manage roles and scopes on users:
+
+- [Add-CMSecurityRoleToAdministrativeUser](/powershell/module/configurationmanager/Add-CMSecurityRoleToAdministrativeUser): Add a security role to a user or group.
+- [Remove-CMSecurityRoleFromAdministrativeUser](/powershell/module/configurationmanager/Remove-CMSecurityRoleFromAdministrativeUser): Remove the association between a security role and an administrative user.
+- [Add-CMSecurityScopeToAdministrativeUser](/powershell/module/configurationmanager/Add-CMSecurityScopeToAdministrativeUser): Add a security scope to a user or group.
+- [Remove-CMSecurityScopeFromAdministrativeUser](/powershell/module/configurationmanager/Remove-CMSecurityScopeToAdministrativeUser): Remove the association between a security scope and an administrative user.
+
+Manage security roles:
+
+- [Copy-CMSecurityRole](/powershell/module/configurationmanager/Copy-CMSecurityRole): Create a custom security role.
+- [Export-CMSecurityRole](/powershell/module/configurationmanager/Export-CMSecurityRole): Export a security role to an XML file.
+- [Get-CMSecurityRole](/powershell/module/configurationmanager/Get-CMSecurityRole): Get a security role.
+- [Import-CMSecurityRole](/powershell/module/configurationmanager/Import-CMSecurityRole): Import a security role from an XML file.
+- [Remove-CMSecurityRole](/powershell/module/configurationmanager/Remove-CMSecurityRole): Remove custom security roles.
+- [Set-CMSecurityRole](/powershell/module/configurationmanager/Set-CMSecurityRole): Change configuration settings of a security role.
+
+Manage permissions on security roles:
+
+- [Get-CMSecurityRolePermission](/powershell/module/configurationmanager/Get-CMSecurityRolePermission): Get the permissions for a security role.
+- [Set-CMSecurityRolePermission](/powershell/module/configurationmanager/Set-CMSecurityRolePermission): Configure a security role with specific permissions.
+
+Manage security scopes:
+
+- [Get-CMSecurityScope](/powershell/module/configurationmanager/Get-CMSecurityScope): Get a security scope.
+- [New-CMSecurityScope](/powershell/module/configurationmanager/New-CMSecurityScope): Create a security scope.
+- [Remove-CMSecurityScope](/powershell/module/configurationmanager/Remove-CMSecurityScope): Remove a security scope.
+- [Set-CMSecurityScope](/powershell/module/configurationmanager/Set-CMSecurityScope): Configure a security scope.
+
+Manage object security scope:
+
+- [Add-CMObjectSecurityScope](/powershell/module/configurationmanager/Add-CMObjectSecurityScope): Add a security scope to an object.
+- [Get-CMObjectSecurityScope](/powershell/module/configurationmanager/Get-CMObjectSecurityScope): Get the security scope for a Configuration Manager object.
+- [Remove-CMObjectSecurityScope](/powershell/module/configurationmanager/Remove-CMObjectSecurityScope): Remove a security scope from a Configuration Manager object.
+
 ## Next steps
 
 [Role-based administration and auditing tool](../../../support/rbaviewer.md)

memdocs/configmgr/core/servers/deploy/configure/site-components.md

@@ -2,7 +2,7 @@
 title: Site components
 titleSuffix: Configuration Manager
 description: Learn how to configure site components to modify the behavior of site system roles and site status reporting.
-ms.date: 04/05/2021
+ms.date: 12/15/2021
 ms.prod: configuration-manager
 ms.technology: configmgr-core
 ms.topic: conceptual
@@ -49,10 +49,24 @@ For more information, see [Use a pull-distribution point](../../../plan-design/h
 
 For more information, see [Network access account](../../../plan-design/hierarchy/accounts.md#network-access-account).
 
+#### Automate software distribution site component with PowerShell
+
+To programmatically view and configure the **Software distribution** site component, use the following PowerShell cmdlets:
+
+- [Get-CMSoftwareDistributionComponent](/powershell/module/configurationmanager/get-cmsoftwaredistributioncomponent)
+- [Set-CMSoftwareDistributionComponent](/powershell/module/configurationmanager/set-cmsoftwaredistributioncomponent)
+
 ### Software update point
 
 For more information, see [Install a software update point](../../../../sum/get-started/install-a-software-update-point.md).
 
+#### Automate software update point site component with PowerShell
+
+To programmatically view and configure the **Software update point** site component, use the following PowerShell cmdlets:
+
+- [Get-CMSoftwareUpdatePointComponent](/powershell/module/configurationmanager/get-cmsoftwareupdatepointcomponent)
+- [Set-CMSoftwareUpdatePointComponent](/powershell/module/configurationmanager/set-cmsoftwareupdatepointcomponent)
+
 ### OS deployment
 
 For more information, see [Specify the drive for offline OS image servicing](../../../../osd/get-started/manage-operating-system-images.md#specify-the-drive-for-offline-os-image-servicing).
@@ -74,22 +88,50 @@ When clients on the intranet can't use Active Directory Domain Services to find
 
 For general information about service location, see [Understand how clients find site resources and services](../../../plan-design/hierarchy/understand-how-clients-find-site-resources-and-services.md).
 
+#### Automate management point site component with PowerShell
+
+To programmatically view and configure the **Management point** site component, use the following PowerShell cmdlets:
+
+- [Get-CMManagementPointComponent](/powershell/module/configurationmanager/get-cmmanagementpointcomponent)
+- [Set-CMManagementPointComponent](/powershell/module/configurationmanager/set-cmmanagementpointcomponent)
+
 ### Status reporting
 
 These settings directly set up the level of detail that's included in status reports from sites and clients.
 
+#### Automate status reporting site component with PowerShell
+
+To programmatically view and configure the **Status reporting** site component, use the following PowerShell cmdlets:
+
+- [Get-CMStatusReportingComponent](/powershell/module/configurationmanager/get-cmstatusreportingcomponent)
+- [Set-CMStatusReportingComponent](/powershell/module/configurationmanager/set-cmstatusreportingcomponent)
+
 ### Email notification
 
 Specify account and email server details to enable Configuration Manager to send email notifications for alerts.
 
 For more information, see [Configure alerts](../../manage/configure-alerts.md#configure-email-notification-for-alerts).
 
+#### Automate email notification site component with PowerShell
+
+To programmatically view and configure the **Email notification** site component, use the following PowerShell cmdlets:
+
+- [Get-CMEmailNotificationComponent](/powershell/module/configurationmanager/get-cmemailnotificationcomponent)
+- [Set-CMEmailNotificationComponent](/powershell/module/configurationmanager/set-cmemailnotificationcomponent)
+
 ### <a name="bkmk_colleval"></a> Collection membership evaluation
 
 Use this component to set how often collection membership is incrementally evaluated. Incremental evaluation updates a collection membership with only new or changed resources.
 
 For more information, see [Best practices for collections](../../../clients/manage/collections/best-practices-for-collections.md).
 
+#### Automate collection membership evaluation site component with PowerShell
+
+To programmatically view and configure the **Collection membership evaluation** site component, use the following PowerShell cmdlets:
+
+- [Get-CMCollectionMembershipEvaluationComponent](/powershell/module/configurationmanager/get-cmcollectionmembershipevaluationcomponent)
+- [Set-CMCollectionMembershipEvaluationComponent](/powershell/module/configurationmanager/set-cmcollectionmembershipevaluationcomponent)
+
 ## Configuration Manager Service Manager
 
 You can use the Service Manager to control Configuration Manager services, and to view the status of any Configuration Manager service or working thread. These services and threads are referred to collectively as Configuration Manager components.