ezazure.ps1

<#
Copyright (c) 2023 Cisco and/or its affiliates.
This software is licensed to you under the terms of the Cisco Sample
Code License, Version 1.0 (the "License"). You may obtain a copy of the
License at
               https://developer.cisco.com/docs/licenses
All use of the material herein must be in accordance with the terms of
the License. All rights not expressly granted by the License are
reserved. Unless required by applicable law or agreed to separately in
writing, software distributed under the License is distributed on an "AS
IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express
or implied.
.SYNOPSIS
    Includes All OS Customization of the AzureStack HCI Cisco Validated Design

.DESCRIPTION
    Configure AzureStack HCI After Operating System Installation

.PARAMETER <j>
    JSON Input File containing Cluster Parameters.   

.EXAMPLE
    ezazure.ps1 -j azure.json
#>

# JUMP HOST REQUIREMENTS
# Add-WindowsFeature -Name rsat-hyper-v-tools, rsat-adds-tools, failover-clustering, rsat-feature-tools-bitlocker-bdeaducext, gpmc -IncludeManagementTools

#=============================================================================
# Active Directory RegEx
#=============================================================================
# https://learn.microsoft.com/en-us/azure-stack/hci/deploy/deployment-tool-checklist
# https://learn.microsoft.com/en-us/azure-stack/hci/deploy/deployment-tool-active-directory
# Active Directory SamAccountName
# ^(?![\.-])(?:[a-zA-Z0-9-.](?!\.$)){1,21}$
# Active Directory Object prefix
# Subscription ID Regex
# 53614803-d327-4397-bf55-8dedcc24be0d
# ^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$

#=============================================================================
# JSON File is a Required Parameter
# Pull in JSON Content
#=============================================================================
param (
    [switch]$clean_disks,
    [switch]$force,
    [string]$j=$(throw "-j <json_file> is required.")
)
#=============================================================================
# Start Log and Configure PowerCLI
#=============================================================================
Start-Transcript -Path ".\Logs\$(get-date -f "yyyy-MM-dd_HH-mm-ss")_$($env:USER).log" -Append -Confirm:$false
Get-PSSession | Remove-PSSession | Out-Null

#=============================================================================
# Setup Variables for Environment
#=============================================================================
$feature_list = ("Hyper-V", "Failover-Clustering", "Data-Center-Bridging", "Bitlocker" , "FS-FileServer",
    "FS-SMBBW", "Hyper-V-PowerShell", "RSAT-AD-Powershell", "RSAT-Clustering-PowerShell", "NetworkATC",
    "NetworkHUD", "FS-DATA-Deduplication")
$jdata      = Get-Content -Path $j | ConvertFrom-Json
$cluster    = $jdata.cluster
$link_speed = $jdata.link_speed
$username   = $jdata.username
$password   = ConvertTo-SecureString $env:domain_administrator_password -AsPlainText -Force;
$credential = New-Object System.Management.Automation.PSCredential ($username,$password);
$client_list = [object[]] @()
$gwsman = Get-WSManCredSSP
if ($jdata.proxy) {
    if ($jdata.proxy.username) {
        $proxy_user  = $jdata.proxy.username
        $proxy_pass  = ConvertTo-SecureString $env:proxy_password -AsPlainText -Force;
        $proxy_creds = New-Object System.Management.Automation.PSCredential ($proxy_user,$proxy_pass);
    }
}

#=============================================================================
# Function: Node Length Check and Reboot Check
#=============================================================================
Function NodeAndRebootCheck {
    Param([psobject]$session_results, [array]$node_list)
    #$session_results | Format-Table | Out-String|ForEach-Object {Write-Host $_}
    $nodes = [object[]] @()
    $reboot_count = 0
    foreach ($result in $session_results) {
        if ($result.completed -eq $True) { $nodes += $result.PSComputerName}
        if ($result.reboot -eq $True) { $reboot_count++ | Out-Null }
    }
    Get-PSSession | Remove-PSSession | Out-Null
        if (!($nodes.Length -eq $node_list)) {
        Write-Host "One or More Nodes Failed on Previous Task." -ForegroundColor Red
        Write-Host " * Original Node List: $node_list" -ForegroundColor Red
        Write-Host " * Completed Node List: $nodes" -ForegroundColor Red
        Write-Host "Please Review the Log Data.  Exiting..." -ForegroundColor Red
        Disable-WSManCredSSP -Role "Client" | Out-Null
        Stop-Transcript
        Exit 1
    }
    Return New-Object PsObject -property @{computer_names=$nodes;reboot_count=$reboot_count}
}
#=============================================================================
# Function: Login to AzureStack HCI Node List
#=============================================================================
Function LoginNodeList {
    Param([pscredential]$credential, [string]$cssp, [array]$node_list)
    if ($credssp -eq $True) {
        try {
            foreach ($node in $node_list) {
                Write-Host "Logging into Host $($node)" -ForegroundColor Yellow
                New-PSSession -ComputerName $node -Credential $credential -Authentication Credssp | Out-Null
            }
        } catch {
            Write-Host "Failed to Login to one of the Hosts" -ForegroundColor Red
            Write-Host $_.Exception.Message
            Exit 1
        }
    } else {
        try {
            foreach ($node in $node_list) {
                Write-Host "Logging into Host $($node)" -ForegroundColor Yellow
                New-PSSession -ComputerName $node -Credential $credential | Out-Null
            }
        } catch {
            Write-Host "Failed to Login to one of the Hosts" -ForegroundColor Red
            Write-Host $_.Exception.Message
            Exit 1
        }
    }
}
#=============================================================================
# Validate Running with Administrator Privileges
#=============================================================================
if (-Not ([Security.Principal.WindowsPrincipal] [Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole] 'Administrator')) {
    Write-Host "Script must run with elevated Administrator permissions...Exiting" -Foreground Red
    Exit 1
}
#=============================================================================
# Install AzureStackHCI EnvironmentChecker
#=============================================================================
if ($jdata.proxy) {
    
}
#$proxy = ([System.Net.WebRequest]::GetSystemWebproxy()).IsBypassed("https://portal.azure.com")
if (!(Get-Module -ListAvailable -Name PowerShellGet)) {
    Write-Host " * $($env:COMPUTERNAME) Installing PowerShellGet." -ForegroundColor Green
    Install-Module PowerShellGet -Confirm:$False -Force
} else { Write-Host " * $($env:COMPUTERNAME) PowerShellGet Already Installed." -ForegroundColor Cyan }
Set-PSRepository -Name PSGallery -InstallationPolicy Trusted
if (!(Get-Module -ListAvailable -Name AzStackHci.EnvironmentChecker)) {
    Write-Host " * $($env:COMPUTERNAME) Installing AzStackHci.EnvironmentChecker." -ForegroundColor Green
    Install-Module AzStackHci.EnvironmentChecker -Confirm:$False -Force
} else { Write-Host " * $($env:COMPUTERNAME) AzStackHci.EnvironmentChecker Already Installed." -ForegroundColor Cyan }


#=============================================================================
# Enable WSManCredSSP Client on Local Machine
#=============================================================================
foreach ($node in $jdata.node_list) {
    $reg = [regex] "The machine is configured to.+$($node)"
    if ($gwsman -match $reg) { $client_list += $node }
}
if (!($jdata.node_list.Length -eq $client_list.Length)) {
    Write-Host "Enabling WSManCredSSP for Client List: $($jdata.node_list)" -ForegroundColor Yellow
    Enable-WSManCredSSP -Role "Client" -DelegateComputer $jdata.node_list -Force | Out-Null
} else {
    Write-Host "WSManCredSSP Already Enabled for Client List: $($jdata.node_list)" -ForegroundColor Yellow
}
#=============================================================================
# Configure Time Zone, Firewall Rules, and Installed Features
#=============================================================================
LoginNodeList -credential $credential -cssp $False -node_list $jdata.node_list
$sessions = Get-PSSession
$sessions | Format-Table | Out-String|ForEach-Object {Write-Host $_}
$session_results = Invoke-Command $sessions -ScriptBlock {
    $jdata = $Using:jdata
    ##########
    Write-Host "$($env:COMPUTERNAME) Beginning Time Zone: '$($jdata.timezone)' Configuration." -ForegroundColor Yellow
    $tz = Get-TimeZone
    if (!($tz.Id -eq $jdata.timezone)) {
        Set-Timezone $jdata.timezone
        $tz = Get-TimeZone
        if ($tz.Id -eq $jdata.timezone) {
            Write-Host " * $($env:COMPUTERNAME) Successfully Set Time Zone to: '$($jdata.timezone)'." -ForegroundColor Green
        } else {
            Write-Host " * $($env:COMPUTERNAME) Failed to Set Time Zone to: '$($jdata.timezone)'.  Exiting..." -ForegroundColor Red
            Return New-Object PsObject -property @{completed=$False}
        }
    } else {
        Write-Host " * $($env:COMPUTERNAME) Timezone already set to: '$($jdata.timezone)'." -ForegroundColor Cyan
    }
    Write-Host "$($env:COMPUTERNAME) Compeleted Time Zone: '$($jdata.timezone)' Configuration." -ForegroundColor Yellow
    ##########
    Write-Host "$($env:COMPUTERNAME) Beginning Remote Desktop Network Firewall Rule(s) Configuration." -ForegroundColor Yellow
    $network_firewall = Get-NetFirewallRule -DisplayGroup "Remote Desktop"
    foreach ($item in $network_firewall) {
        if (!($item.Enabled -eq $true)) { Enable-NetFirewallRule -Name $item.Name }
    }
    $network_firewall = Get-NetFirewallRule -DisplayGroup "Remote Desktop"
    foreach ($item in $network_firewall) {
        if ($item.Enabled -eq $true) {
            Write-Host " * $($env:COMPUTERNAME) Successfully Configured Remote Desktop Network Firewall Rule $($item.Name)." -ForegroundColor Green
        } else {
            Write-Host " * $($env:COMPUTERNAME) Failed on Enabling Remote Desktop Network Firewall Rule $($item.Name).  Exiting..." -ForegroundColor Red
            Return New-Object PsObject -property @{completed=$False}
        }
    }
    Write-Host "$($env:COMPUTERNAME) Completed Remote Desktop Network Firewall Rule(s) Configuration." -ForegroundColor Yellow
    ##########
    Write-Host "$($env:COMPUTERNAME) Beginning Check for Required Windows Features and Restarting Host." -ForegroundColor Yellow
    $new_list = [System.Collections.ArrayList]@()
    $reboot = $False
    $wf = Get-WindowsFeature | Select-Object *
    foreach ($item in $Using:feature_list) {
        if ($wf | Where-Object {$_.Name -eq $item}) {
            if (!(($wf | Where-Object {$_.Name -eq $item}).Installed -eq $true)) { $new_list.Add($item) }
        } else { Write-Host "$($env:COMPUTERNAME) Unknown Feature '$($item)'" -ForegroundColor Red
        }
    }
    if ($new_list.Length -gt 0) {
        Add-WindowsFeature -Name $new_list -IncludeAllSubFeature -IncludeManagementTools -Restart
        $reboot = $True
    }
    Write-Host "$($env:COMPUTERNAME) Completed Check for Required Windows Features and Restarted Host." -ForegroundColor Yellow
    $gva = Get-PSSessionConfiguration -Name 'VirtualAccount'
    if (!($gva)) {
        Write-Host "$($env:COMPUTERNAME) Failed on VirtualAccount Check.  Please Run the Following PowerShell Command On Each Host." -ForegroundColor Red
        Write-Host " * Run: New-PSSessionConfigurationFile -RunAsVirtualAccount -Path .\VirtualAccount.pssc" -ForegroundColor Red
        Write-Host " * Run: Register-PSSessionConfiguration -Name 'VirtualAccount' -Path .\VirtualAccount.pssc -Force" -ForegroundColor Red
        Write-Host " * Validate with: Get-PSSessionConfiguration -Name 'VirtualAccount'" -ForegroundColor Red
        Return New-Object PsObject -property @{completed=$False}
    }
    Return New-Object PsObject -property @{completed=$True;reboot=$reboot}
}
#=============================================================================
# Setup Environment for Next Loop; Sleep 10 Minutes if reboot_count gt 0
#=============================================================================
Get-PSSession | Remove-PSSession | Out-Null
$nrc = NodeAndRebootCheck -session_results $session_results -node_list $jdata.node_list
if ($nrc.reboot_count -gt 0) {
    Write-Host "Sleeping for 10 Minutes to Wait for Server Reboots." -ForegroundColor Yellow
    Start-Sleep -Seconds 600
}
#=============================================================================
# Install Windows Updates on AzureStack HCI Node List
#=============================================================================
LoginNodeList -credential $credential -cssp $False -node_list $jdata.node_list
$sessions = Get-PSSession
$session_results = Invoke-Command $sessions -Script {
    $reboot = $False
    Write-Host "$($env:COMPUTERNAME) Beginning Check for NuGet and PSWindowsUpdate." -ForegroundColor Yellow
    $fng = Find-Package -Name NuGet
    if (!($fng | Where-Object {$_.Version -gt 2.8.5.200})) {
        Write-Host " * $($env:COMPUTERNAME) Installing NuGet Version 2.8.5.201." -ForegroundColor Green
        Install-PackageProvider -Name NuGet -MinimumVersion 2.8.5.201 -Force
        $fng = Find-Package -Name NuGet
        if (!($fng | Where-Object {$_.Version -gt 2.8.5.200})) {
            Write-Host "Failed to Install NuGet Version 2.8.5.201 or Greater." -ForegroundColor Red
            Return New-Object PsObject -property @{completed=$False;reboot=$reboot}
        }
    } else { Write-Host " * $($env:COMPUTERNAME) NuGet Version 2.8.5.201+ Already Installed." -ForegroundColor Cyan }
    Write-Host "$($env:COMPUTERNAME) Completed Check for NuGet and PSWindowsUpdate." -ForegroundColor Yellow
    if (!(Get-Module -ListAvailable -Name PSWindowsUpdate)) {
        Write-Host " * $($env:COMPUTERNAME) Installing PSWindowsUpdate." -ForegroundColor Green
        Install-Module PSWindowsUpdate -Confirm:$False -Force
    } else { Write-Host " * $($env:COMPUTERNAME) PSWindowsUpdate Already Installed." -ForegroundColor Cyan }
    Import-Module PSWindowsUpdate
    Write-Host "$($env:COMPUTERNAME) Beginning Check for Windows Updates." -ForegroundColor Yellow
    $gwu = Get-WUList -MicrosoftUpdate
    $gwu | Format-Table | Out-String|ForEach-Object {Write-Host $_}
    if ($gwu) {
        Write-Host " * $($env:COMPUTERNAME) Installing Windows Updates and Rebooting Host if Required." -ForegroundColor Green
        Install-WindowsUpdate -MicrosoftUpdate -AcceptAll -AutoReboot
        $reboot = $True
    } else {
        Write-Host " * $($env:COMPUTERNAME) Windows already up to date." -ForegroundColor Cyan
    }
    Write-Host "$($env:COMPUTERNAME) Completed Check for Windows Updates." -ForegroundColor Yellow
    Return New-Object PsObject -property @{completed=$True;reboot=$reboot}
}
#=============================================================================
# Setup Environment for Next Loop; Sleep 10 Minutes if reboot_count gt 0
#=============================================================================
Get-PSSession | Remove-PSSession | Out-Null
$nrc = NodeAndRebootCheck -session_results $session_results -node_list $jdata.node_list
if ($nrc.reboot_count -gt 0) {
    Write-Host "Sleeping for 10 Minutes to Wait for Server Reboots." -ForegroundColor Yellow
    Start-Sleep -Seconds 600
}
#=============================================================================
# Customize the AzureStack HCI OS Environment
#=============================================================================
LoginNodeList -credential $credential -cssp $False -node_list $jdata.node_list
$sessions = Get-PSSession
$session_results = Invoke-Command $sessions -ScriptBlock {
    Function RegistryKey {
        Param([string]$registry_path, [object]$key)
        $tp = Test-Path -path $registry_path
        if (!($tp)) { New-Item $registry_path }
        $reg = Get-ItemProperty -Path $registry_path
        if ($null -eq $reg.($key.name)) {
            New-Itemproperty -Path $registry_path -Name $key.name -Value $key.value -PropertyType $key.type | Out-Null
        } elseif (!($reg.($key.name) -eq $key.value)) {
            Write-Host " * $($env:COMPUTERNAME) Updating Key: '$($key.name)' Value: '$($key.value)'" -ForegroundColor Green
            $reg | Set-ItemProperty -Name $key.name -Value $key.value | Out-Null
        }
        $reg = Get-ItemProperty -Path $registry_path
        if ($reg.($key.name) -eq $key.value) {
            Write-Host " * $($env:COMPUTERNAME) Successfully Set '$registry_path\$($key.name)' to '$($key.value)'." -ForegroundColor Green
            Return New-Object PsObject -property @{completed=$True}
        } else {
            Write-Host " * $($env:COMPUTERNAME) Failed to Set '$registry_path\$($key.name)' to '$($key.value)'." -ForegroundColor Red
            $reg | Format-Table | Out-String|ForEach-Object {Write-Host $_}
            Return New-Object PsObject -property @{completed=$False}
        }
    }
    $jdata = $Using:jdata
    ##########
    Write-Host "$($env:COMPUTERNAME) Beginning Check for Windows Features..." -ForegroundColor Yellow
    $wf = Get-WindowsFeature | Select-Object *
    foreach ($item in $Using:feature_list) {
        if (!(($wf | Where-Object {$_.Name -eq $item}).Installed -eq $true)) {
            Write-Host "Failed on Enabling Windows Feature $item.  Exiting..." -ForegroundColor Red
            Return New-Object PsObject -property @{completed=$False}
        }
    }
    Write-Host "$($env:COMPUTERNAME) Completed Check for Windows Features..." -ForegroundColor Yellow
    ##########
    Write-Host "$($env:COMPUTERNAME) Beginning Remote Desktop Access Configuration." -ForegroundColor Yellow
    $registry_path = "HKLM:\System\CurrentControlSet\Control\Terminal Server"
    $key = New-Object PsObject -property @{name="fDenyTSConnections"; value=0; type="Dword" }
    $regkey = RegistryKey $registry_path $key
    if (!($regkey.Completed -eq $True)) { Return New-Object PsObject -property @{completed=$False} }
    Write-Host "$($env:COMPUTERNAME) Completed Remote Desktop Access Configuration." -ForegroundColor Yellow
    ##########
    Write-Host "$($env:COMPUTERNAME) Beginning Memory Crashdump Registry settings Configuring." -ForegroundColor Yellow
    $keys = ("CrashDumpEnabled", "FilterPages")
    $registry_path = "HKLM:\System\CurrentControlSet\Control\CrashControl"
    foreach ($item in $keys) {
        $key = New-Object PsObject -property @{name=$item; value=1; type="Dword" }
        $regkey = RegistryKey $registry_path $key
        if (!($regkey.Completed -eq $True)) { Return New-Object PsObject -property @{completed=$False} }
    }
    Write-Host "$($env:COMPUTERNAME) Completed Memory Crashdump Registry settings Configuring." -ForegroundColor Yellow
    ##########
    Write-Host "$($env:COMPUTERNAME) Beginning Windows Secure Core Configuration." -ForegroundColor Yellow
    $registry_path = "HKLM:\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity"
    $key = New-Object PsObject -property @{name="Enabled"; value=1; type="Dword" }
    $regkey = RegistryKey $registry_path $key
    if (!($regkey.Completed -eq $True)) { Return New-Object PsObject -property @{completed=$False} }
    $key = New-Object PsObject -property @{name="WasEnabledBy"; value=0; type="Dword" }
    $regkey = RegistryKey $registry_path $key
    if (!($regkey.Completed -eq $True)) { Return New-Object PsObject -property @{completed=$False} }
    $registry_path = "HKLM:\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\SystemGuard"
    $key = New-Object PsObject -property @{name="Enabled"; value=1; type="Dword" }
    $regkey = RegistryKey $registry_path $key
    if (!($regkey.Completed -eq $True)) { Return New-Object PsObject -property @{completed=$False} }
    Write-Host "$($env:COMPUTERNAME) Completed Windows Secure Core Configuration." -ForegroundColor Yellow
    ##########
    Write-Host "$($env:COMPUTERNAME) Begin Validating Secure-Core Configuration." -ForegroundColor Yellow
    $sb = Confirm-SecureBootUEFI
    if (!($sb -eq $true)) {
        Write-Host "$($env:COMPUTERNAME) Secure Boot State is not Enabled.  Exiting..." -ForegroundColor Red
        Return New-Object PsObject -property @{completed=$False}
    }
    $file = "./KernelDmaProtection.ps1"
    if (!([System.IO.File]::Exists("$file"))) {
        Invoke-WebRequest -URI "https://raw.githubusercontent.com/scotttyso/intersight_iac/master/examples/azurestack_hci/$file" -OutFile "$file"
    }
    $dma_protection = "$file"
    if (!($dma_protection -eq $True)) {
        Write-Host " * $($env:COMPUTERNAME) Failed.  Kernel DMA Protection is not Enabled."  -ForegroundColor Red
        Write-Host "   Manually Check Output of 'msinfo32.exe' for 'Kernel DMA Protection' State: 'On'." -ForegroundColor Red
        Return New-Object PsObject -property @{completed=$False}
    }
    Remove-Item "$file" | Out-Null
    ##########
    # MSINFo32.EXE on page 78
    # https://www.tenforums.com/tutorials/68926-verify-if-device-guard-enabled-disabled-windows-10-a.html
    # Need to finish the Virtualization Based Security Checks
    Write-Host "$($env:COMPUTERNAME) Completed Validating Secure-Core Configuration." -ForegroundColor Yellow
    ##########
    Write-Host "$($env:COMPUTERNAME) Beginning Retrieval of physical NIC port names." -ForegroundColor Yellow
    $gna = Get-NetAdapter -Name "SlotID*"
    foreach ($adapter in $gna) {
        if ($adapter.Status -eq "Up" -and $adapter.LinkSpeed -eq $Using:link_speed) {
            Write-Host " * $($env:COMPUTERNAME) Matched NetAdapter $($adapter.Name)." -ForegroundColor Green
        } else {
            Write-Host " * $($env:COMPUTERNAME) Failed to Match NetAdapter '$($adapter.Name)' with Status: 'Up', LinkSpeed: '$($Using:link_speed)'.  Exiting..." -ForegroundColor Red
            $adapter | Format-Table Name, InterfaceDescription, Status, MacAddress, LinkSpeed | Out-String|ForEach-Object {Write-Host $_}
            Return New-Object PsObject -property @{completed=$False}
        }
    }
    Write-Host "$($env:COMPUTERNAME) Completed Retrieval of physical NIC port names." -ForegroundColor Yellow
    Write-Host "$($env:COMPUTERNAME) Beginning Create and Deploy Standalone Network ATC Intent." -ForegroundColor Yellow
    $gnis = Get-NetIntentStatus
    if (!($gnis | Where-Object {$_.IntentName -eq "mgmt_compute_storage" -and $_.ConfigurationStatus -eq "Success" -and $_.ProvisioningStatus -eq "Completed" -and $_.IsComputeIntentSet -eq $True -and $_.IsManagementIntentSet -eq $True -and $_.IsStorageIntentset -eq $True -and $_.IsStretchIntentSet -eq $True})) {
        if ($gnis | Where-Object {$_.IntentName -eq "mgmt_compute_storage"}) {
            Write-Host " * $($env:COMPUTERNAME) Failed to match NetIntent 'mgmt_compute_storage' with:" -ForegroundColor Red
            Write-Host "   ConfigurationStatus: 'Success'`   ProvisioningStatus: 'Completed'`   IsComputeIntentSet: 'True'" -ForegroundColor Red
            Write-Host "   IsManagementIntentSet: 'True'`   IsStorageIntentset: 'True'`   IsStretchIntentSet: 'True'.  `Exiting..." -ForegroundColor Red
            $gnis | Format-Table Host,IntentName,ConfigurationStatus,Error,ProvisioningStatus,IsComputeIntentSet,IsManagementIntentSet,IsStorageIntentset,IsStretchIntentSet | Out-String|ForEach-Object {Write-Host $_}
            Return New-Object PsObject -property @{completed=$False}
        } else {
            $AdapterOverride = New-NetIntentAdapterPropertyOverrides
            $AdapterOverride.NetworkDirectTechnology = 4
            $AdapterOverride
            $QoSOverride = New-NetIntentQoSPolicyOverRides
            $QoSOverride.PriorityValue8021Action_SMB = 4
            $QoSOverride.PriorityValue8021Action_Cluster = 5
            $QoSOverride
            $StorageOverride = new-NetIntentStorageOverrides
            $StorageOverride.EnableAutomaticIPGeneration = $false
            $StorageOverride
            $null = Add-NetIntent -AdapterName $adapter_list -Management -Compute -Storage -StorageVlans $jdata.storage_vlans[0].vlan_id, $jdata.storage_vlans[1].vlan_id -QoSPolicyOverrides $QoSOverride -AdapterPropertyOverrides $AdapterOverride -StorageOverrides $Storageoverride -Name mgmt_compute_storage
        }
    }
    $gnis = Get-NetIntentStatus
    if ($gnis | Where-Object {$_.IntentName -eq "mgmt_compute_storage" -and $_.ConfigurationStatus -eq "Success" -and $_.ProvisioningStatus -eq "Completed" -and $_.IsComputeIntentSet -eq $True -and $_.IsManagementIntentSet -eq $True -and $_.IsStorageIntentset -eq $True -and $_.IsStretchIntentSet -eq $True}) {
        Write-Host " * $($env:COMPUTERNAME) Matched NetIntent Network 'mgmt_compute_storage' Settings." -ForegroundColor Green
    } else {
        Write-Host " * $($env:COMPUTERNAME) Failed to match NetIntent 'mgmt_compute_storage' with:" -ForegroundColor Red
        Write-Host "   ConfigurationStatus: 'Success'`   ProvisioningStatus: 'Completed'`   IsComputeIntentSet: 'True'" -ForegroundColor Red
        Write-Host "   IsManagementIntentSet: 'True'`   IsStorageIntentset: 'True'`   IsStretchIntentSet: 'True'.  `Exiting..." -ForegroundColor Red
        $gnis | Format-Table Host,IntentName,ConfigurationStatus,Error,ProvisioningStatus,IsComputeIntentSet,IsManagementIntentSet,IsStorageIntentset,IsStretchIntentSet | Out-String|ForEach-Object {Write-Host $_}
        Return New-Object PsObject -property @{completed=$False}
    }
    Write-Host "$($env:COMPUTERNAME) Verifying Management vNIC in parent partition." -ForegroundColor Yellow
    $gna = Get-NetAdapter -Name "*mgmt_compute_storage*"
    $gna_count = 0
    $vnames = Get-NetAdapter -Name "*mgmt_compute_storage*" | Select-Object Name
    foreach ($vname in $vnames) {
        if ($gna | Where-Object {$_.Name -eq $vname.Name -and $_.Status -eq "Up" -and $_.LinkSpeed -eq $Using:link_speed}) { $gna_count++ | Out-Null }
    }
    if ($gna_count -eq 3) {
        Write-Host " * $($env:COMPUTERNAME) Verified Virtual NIC Creation." -ForegroundColor Green
    } else {
        Write-Host " * $($env:COMPUTERNAME) Failed to Match Virtual NIC Creation.  Expected:" -ForegroundColor Red
        foreach ($vname in $vnames) {
            Write-Host "   Name: $vname, with Status: 'Up', LinkSpeed: '$($Using:link_speed)'" -ForegroundColor Red
        }
        $gna | Format-Table Name, InterfaceDescription, Status, MacAddress, LinkSpeed | Out-String|ForEach-Object {Write-Host $_}
        Return New-Object PsObject -property @{completed=$False}
    }
    Write-Host "  * $($env:COMPUTERNAME) Verifying Virtual Switch." -ForegroundColor Cyan
    $gvsw = Get-VMSwitch
    if ($gvsw | Where-Object {$_.Name -eq "ConvergedSwitch(mgmt_compute_storage)" -and $_.SwitchType -eq "External" -and $_.NetAdapterInterfaceDescription -eq "Teamed-Interface"}) {
        Write-Host " * $($env:COMPUTERNAME) Matched Virtual Switch Settings." -ForegroundColor Green
    } else {
        Write-Host " * $($env:COMPUTERNAME) Failed to Match Virtual Switch Settings.  Expected:" -ForegroundColor Red
        Write-Host "   Name: 'ConvergedSwitch(mgmt_compute_storage)', `SwitchType: 'External', `NetAdapterInterfaceDescription: 'Teamed-Interface'.  `Exiting..." -ForegroundColor Red
        $gvsw | Format-Table Name, SwitchType, NetAdapterInterfaceDescription, NetAdapterInterfaceDescriptions | Out-String|ForEach-Object {Write-Host $_}
        Return New-Object PsObject -property @{completed=$False}
    }
    Write-Host "  * $($env:COMPUTERNAME) Verifying SET Switch Load Balancing Algorithm." -ForegroundColor Cyan
    $gvsw = Get-VMSwitch | Get-VMSwitchTeam
    if ($gvsw | Where-Object {$_.Name -eq "ConvergedSwitch(mgmt_compute_storage)" -and $_.LoadBalancingAlgorithm -eq "HyperVPort"}) {
        Write-Host " * $($env:COMPUTERNAME) Matched SET Switch Load Balancing Algorithm." -ForegroundColor Green
    } else {
        Write-Host " * $($env:COMPUTERNAME) Failed to Match SET Switch Load Balancing Algorithm.  Expected: `Name: 'ConvergedSwitch(mgmt_compute_storage)', `LoadBalancingAlgorithm: 'HyperVPort'.  `Exiting..." -ForegroundColor Red
        $gvsw | Format-List | Out-String|ForEach-Object {Write-Host $_}
        Return New-Object PsObject -property @{completed=$False}
    }
    Write-Host "$($env:COMPUTERNAME) Completed Network ATC Intent Status Configuration." -ForegroundColor Yellow
    # CONFIRM ITEMS
    # Variables for Storage VLANs
    # $jdata.storage_vlans[0].gateway
    # $jdata.storage_vlans[1].gateway
    # Two Default Routes or One
    Write-Host "$($env:COMPUTERNAME) Beginning Configuring default route for Management NIC." -ForegroundColor Yellow
    $gateway_a = $jdata.storage_vlans[0].gateway
    $gateway_b = $jdata.storage_vlans[1].gateway
    $g_mgmt_route = Get-NetRoute | Where-Object {$_.DestinationPrefix -eq "0.0.0.0/0"}
    if ($g_mgmt_route | Where-Object {$_.DestinationPrefix -eq "0.0.0.0/0" -and $_.Gateway -eq $gateway_a -and $_.Metric -eq 10}) {
        New-NetRoute -DestinationPrefix 0.0.0.0/0 -InterfaceAlias "vManagement(mgmt_compute_storage)” -NextHop $gateway_a -RouteMetric 10
    }
    if ($g_mgmt_route | Where-Object {$_.DestinationPrefix -eq "0.0.0.0/0" -and $_.Gateway -eq $gateway_b -and $_.Metric -eq 10}) {
        New-NetRoute -DestinationPrefix 0.0.0.0/0 -InterfaceAlias "vManagement(mgmt_compute_storage)” -NextHop $gateway_b -RouteMetric 10
    }
    $mgmt_route_count = 0
    $g_mgmt_route = Get-NetRoute | Where-Object {$_.DestinationPrefix -eq "0.0.0.0/0"}
    if ($g_mgmt_route | Where-Object {$_.DestinationPrefix -eq "0.0.0.0/0" -and $_.Gateway -eq $gateway_a -and $_.Metric -eq 10}) {
        $mgmt_route_count++ | Out-Null
    }
    if ($g_mgmt_route | Where-Object {$_.DestinationPrefix -eq "0.0.0.0/0" -and $_.Gateway -eq $gateway_b -and $_.Metric -eq 10}) {
        $mgmt_route_count++ | Out-Null
    }
    if ($mgmt_route_count -eq 2) {
        Write-Host " * $($env:COMPUTERNAME) Verified Default Route for Management NIC." -ForegroundColor Green
    } else {
        Write-Host " * $($env:COMPUTERNAME) Failed to Match Default Route for Management NIC.  Expected:" -ForegroundColor Red
        Write-Host "   -DestinationPrefix: 0.0.0.0/0, with Gateway: $gateway_a, Metric: '10'" -ForegroundColor Red
        Write-Host "   -DestinationPrefix: 0.0.0.0/0, with Gateway: $gateway_b, Metric: '10'" -ForegroundColor Red
        $g_mgmt_route | Where-Object {$_.DestinationPrefix -eq "0.0.0.0/0"} | Out-String|ForEach-Object {Write-Host $_}
        Return New-Object PsObject -property @{completed=$False}
    }
    Write-Host "$($env:COMPUTERNAME) Completed Configuring default route for Management NIC " -ForegroundColor Yellow
    Return New-Object PsObject -property @{completed=$True}
}
#=============================================================================
# Setup Environment for Next Loop; Sleep 10 Minutes if reboot_count gt 0
#=============================================================================
Get-PSSession | Remove-PSSession | Out-Null
$nrc = NodeAndRebootCheck -session_results $session_results -node_list $jdata.node_list
#=============================================================================
# Configure vSMB Networks
#=============================================================================
$x = $jdata.storage_vlans[0].ip_address -split "."
$prefix_a  = ($jdata.storage_vlans[0].gateway -split ".")[1]
$network_a = "$($x[0]).$($x[1]).$($x[2])."
$host_ip_a = $x[3]
$x = $jdata.storage_vlans[1].ip_address -split "/"
$prefix_b  = ($jdata.storage_vlans[1].gateway -split ".")[1]
$network_b = "$($x[0]).$($x[1]).$($x[2])."
$host_ip_b = $x[3]
$nodes = [object[]] @()
foreach ($node in $jdata.node_list) {
    $ip_address_a = $network_a+($host_ip_a + $jdata.node_list.IndexOf($node)).ToString()
    $ip_address_b = $network_b+($host_ip_b + $jdata.node_list.IndexOf($node)).ToString()
    $session = New-CimSession -ComputerName $node -Credential $credential
    $gnic = Get-NetIPConfiguration -CimSession $session -InterfaceAlias "vSMB*Port 1)"
    if (!($gnic | Where-Object {$_.IPAddress -eq $ip_address_a -and $_.PrefixLength -eq $prefix_a})) {
        New-NetIPAddress -CimSession $session -InterfaceAlias "vSMB*Port 1)" -IPAddress $ip_address_a -PrefixLength $prefix_a
    }
    $gnic = Get-NetIPConfiguration -CimSession $session -InterfaceAlias "vSMB*Port 1)"
    if ($gnic | Where-Object {$_.IPAddress -eq $ip_address_a -and $_.PrefixLength -eq $prefix_a}) {
        Write-Host " * $($env:COMPUTERNAME) Matched $($gnic.InterfaceAlias)." -ForegroundColor Green
    } else {
        Write-Host " * $($env:COMPUTERNAME) Failed to Match $($gnic.InterfaceAlias).  Expected: " -ForegroundColor Red
        Write-Host "   IP Address: $ip_address_a`   Prefix: $prefix_a   `Exiting..." -ForegroundColor Red
        $gnic | Format-Table | Out-String|ForEach-Object {Write-Host $_}
        Exit 1
    }
    $gnic = Get-NetIPConfiguration -CimSession $session -InterfaceAlias "vSMB*Port 2)"
    if (!($gnic | Where-Object {$_.IPAddress -eq $ip_address_b -and $_.PrefixLength -eq $prefix_b})) {
        New-NetIPAddress -CimSession $session -InterfaceAlias "vSMB*Port 1)" -IPAddress $ip_address_b -PrefixLength $prefix_b
    }
    $gnic = Get-NetIPConfiguration -CimSession $session -InterfaceAlias "vSMB*Port 2)"
    if ($gnic | Where-Object {$_.IPAddress -eq $ip_address_b -and $_.PrefixLength -eq $prefix_b}) {
        Write-Host " * $($env:COMPUTERNAME) Matched $($gnic.InterfaceAlias)." -ForegroundColor Green
    } else {
        Write-Host " * $($env:COMPUTERNAME) Failed to Match $($gnic.InterfaceAlias).  Expected: " -ForegroundColor Red
        Write-Host "   IP Address: $ip_address_b`   Prefix: $prefix_b   `Exiting..." -ForegroundColor Red
        $gnic | Format-Table | Out-String|ForEach-Object {Write-Host $_}
        Exit 1
    }
    $nodes += $node
}
Get-CimSession | Remove-CimSession
Remove-Variable session
#==============================================
# Confirm All Nodes Completed
#==============================================
if (!($nodes.Length -eq $jdata.node_list.Length)) {
    Write-Host "One or More Nodes Failed on Previous Task." -ForegroundColor Red
    Write-Host " * Original Node List: $($jdata.node_list)" -ForegroundColor Red
    Write-Host " * Completed Node List: $nodes" -ForegroundColor Red
    Write-Host "Please Review the Log Data.  Exiting..." -ForegroundColor Red
    Disable-WSManCredSSP -Role "Client" | Out-Null
    Stop-Transcript
    Exit 1
}
#==============================================
# Log Into Nodes and Run Next Section
#==============================================
LoginNodeList -credential $credential -cssp $False -node_list $jdata.node_list
$sessions = Get-PSSession
$session_results = Invoke-Command $sessions -ScriptBlock {
    $jdata = $Using:jdata
    Write-Host "$($env:COMPUTERNAME) Enabling CredSSP" -ForegroundColor Yellow
    Enable-WSManCredSSP -Role Server -Force | Out-Null
    $gwsman = Get-WSManCredSSP
    if (!($gwsman -match "This computer is configured to receive credentials from a remote client computer")) {
        Write-Host "$($env:COMPUTERNAME) Failed to Enable WSMan Credentials." -ForegroundColor Red
        Return New-Object PsObject -property @{completed=$False}
    }
    Write-Host "$($env:COMPUTERNAME) Begin Removing DNS Registration from Storage vNICs." -ForegroundColor Yellow
    $gdnsclient = Get-DnsClient -InterfaceAlias "vSMB*"
    foreach ($adapter in $gdnsclient) {
        if (!($adapter.RegisterThisConnectionsAddress -eq $False)) { $adapter | Set-DnsClient -RegisterThisConnectionsAddress:$False }
    }
    $gdnsclient = Get-DnsClient -InterfaceAlias "vSMB*"
    foreach ($adapter in $gdnsclient) {
        if ($adapter.RegisterThisConnectionsAddress -eq $False) {
            Write-Host " * $($env:COMPUTERNAME) Completed DNS Registration Removal from Storage vNIC: $($adapter.InterfaceAlias)." -ForegroundColor Cyan
        } else {
            Write-Host " * $($env:COMPUTERNAME) Failed to remove DNS Registration from Storage vNIC: $($adapter.InterfaceAlias)." -ForegroundColor Red
            $adapter | Format-Table InterfaceAlias,RegisterThisConnectionsAddress | Out-String|ForEach-Object {Write-Host $_}
            Return New-Object PsObject -property @{completed=$False}
        }
    }
    Write-Host "$($env:COMPUTERNAME) Completed Removing DNS Registration from Storage vNICs." -ForegroundColor Yellow
    ##########
    Write-Host "$($env:COMPUTERNAME) Begin Configuring vSwitch to pass 802.1p priority marking." -ForegroundColor Yellow
    $gvma = Get-VMNetworkAdapter -ManagementOS -Name "vManagement(mgmt_compute_storage)"
    if (!($gvma | Where-Object {$_.IeeePriorityTag -eq "On"})) {
        Set-VMNetworkAdapter -Name  “vManagement(mgmt_compute_storage)" -ManagementOS -IeeePriorityTag On
    }
    $gvma = Get-VMNetworkAdapter -ManagementOS -Name "vManagement(mgmt_compute_storage)"
    if ($gvma | Where-Object {$_.Name -eq “vManagement(mgmt_compute_storage)" -and $_.IeeePriorityTag -eq "On"}) {
        Write-Host " * $($env:COMPUTERNAME) Completed Configuring vSwitch to pass 802.1p priority marking." -ForegroundColor Cyan
    } else {
        Write-Host " * $($env:COMPUTERNAME) Failed to Configure vSwitch to pass 802.1p priority marking." -ForegroundColor Red
        $gvma | Format-Table Name,IeeePriorityTag | Out-String|ForEach-Object {Write-Host $_}
        Return New-Object PsObject -property @{completed=$False}
    }
    Write-Host "$($env:COMPUTERNAME) Completed Configuring vSwitch to pass 802.1p priority marking." -ForegroundColor Yellow
    Write-Host "$($env:COMPUTERNAME) Begin Validating vNIC VLANs Configuration." -ForegroundColor Yellow
    $gvma = Get-VMNetworkAdapter -ManagementOS -Name "vSMB*" | Get-VMNetworkAdapterIsolation
    foreach ($adapter in $gvma) {
        if ($adapter.Name -match ".*Port 1") { $icount = 0 } else { $icount = 1 }
        $vlan_id = $Using.jdata.storage_vlans[$icount].vlan_id
        if ($adapter.DefaultIsolationID -eq $vlan_id) {
            Write-Host " * $($env:COMPUTERNAME) Validated $($adapter.ParentAdapter) VLAN ID: $vlan_id." -ForegroundColor Cyan
        } else {
            Write-Host " * $($env:COMPUTERNAME) Failed to Match $($adapter.ParentAdapter) VLAN ID: $vlan_id." -ForegroundColor Red
            $adapter | Format-Table IsolationMode, DefaultIsolationID, ParentAdapter -AutoSize | Out-String|ForEach-Object {Write-Host $_}
            Return New-Object PsObject -property @{completed=$False}
        }
    }
    Write-Host "$($env:COMPUTERNAME) Completed Validating vNIC VLANs Configuration." -ForegroundColor Yellow
    Write-Host "$($env:COMPUTERNAME) Begin Validating vNIC Status." -ForegroundColor Yellow
    $gna = Get-NetAdapter
    foreach ($adapter in $gna) {
        if ($adapter.Name -match "^SlotID") { $mtu = $jdata.mtu_physical } else { $mtu = $jdata.mtu_virtual }
        if ($adapter.Status -eq "Up" -and $adapter.MTUSize -eq $mtu -and $adapter.LinkSpeed -eq $Using:link_speed) {
            Write-Host " * $($env:COMPUTERNAME) Validated $($adapter.Name)." -ForegroundColor Cyan
        } else {
            Write-Host " * $($env:COMPUTERNAME) Failed to Match $($adapter.Name).  Expected:" -ForegroundColor Red
            Write-Host "   Status: Up`   MTUSize: $($mtu)`   LinkSpeed: $($Using:link_speed)"
            $adapter | Format-Table Name,InterfaceDescription,Status,MTUSize,LinkSpeed -AutoSize | Out-String|ForEach-Object {Write-Host $_}
            Return New-Object PsObject -property @{completed=$False}
        }
    }
    Write-Host "$($env:COMPUTERNAME) Completed Validating vNIC Status." -ForegroundColor Yellow
    Write-Host "$($env:COMPUTERNAME) Begin Validating RDMA and RoCEv2 Status on Physical NICs." -ForegroundColor Yellow
    $gtest = Get-NetAdapterAdvancedProperty -InterfaceDescription "SlotID*" -DisplayName "NetworkDirect*"
    $display = @(@("NetworkDirect Functionality", "Enabled"), @("NetworkDirect Technology", "RoCEv2"))
    foreach ($x in @(1, 2)) {
        foreach ($y in $display) {
            if ($gtest | Where-Object {$_.Name -match ".*Port $x" -and $_.DisplayName -eq $y[0] -and $_.DisplayValue -eq $y[1]}) {
                Write-Host " * $($env:COMPUTERNAME) Validated $($x)`   DisplayName: $($y[0])`   DisplayValue: $($y[1])." -ForegroundColor Cyan
            } else {
                Write-Host " * $($env:COMPUTERNAME) Failed to Match Port $x.  Expected:" -ForegroundColor Red
                Write-Host "   DisplayName: $($y[0])`   DisplayValue: $($y[1])"
                $gtest | Where-Object {$_.Name -match ".*Port $x" -and $_.DisplayName -eq $y[0]} | Format-Table Name, InterfaceDescription,DisplayName,DisplayValue -AutoSize | Out-String|ForEach-Object {Write-Host $_}
                Return New-Object PsObject -property @{completed=$False}
            }
        }
    }
    Write-Host "$($env:COMPUTERNAME) Completed Validating RDMA and RoCEv2 Status on Physical NICs." -ForegroundColor Yellow
    Write-Host "$($env:COMPUTERNAME) Begin Validating RDMA is enabled on the Storage vNICs." -ForegroundColor Yellow
    $gna_rdma = Get-NetAdapterRdma
    foreach ($adapter in $gna_rdma) {
        if ($adapter.Name -match "SlotID") { $x = @($True, $True, $True, $True)
        } elseif ($adapter.Name -match "vManagement") { $x = @($False, $False, "NA", "NA")
        } else {$x = @($True, $True, "NA", "NA") }
        if ($adapter.Enabled -eq $x[0] -and $adapter.Operational -eq $x[1] -and $adapter.PFC -eq $x[2] -and $adapter.ETS -eq $x[3]) {
            Write-Host " * $($env:COMPUTERNAME) Validated $($adapter.Name)." -ForegroundColor Cyan
        } else {
            Write-Host " * $($env:COMPUTERNAME) Failed to Match $($adapter.Name).  Expected:" -ForegroundColor Red
            Write-Host "   Enabled: $($x[0])`   Operational: $($x[1])`   PFC: $($x[2])\  ETC: $($x[3])"
            $adapter | Format-Table -AutoSize | Out-String|ForEach-Object {Write-Host $_}
            Return New-Object PsObject -property @{completed=$False}
        }
    }
    Write-Host "$($env:COMPUTERNAME) Completed Validating RDMA is enabled on the Storage vNICs." -ForegroundColor Yellow
    Write-Host "$($env:COMPUTERNAME) Begin Mapping of each storage vNIC to the respective fabric." -ForegroundColor Yellow
    $gvma = Get-VMNetworkAdapterTeamMapping -ManagementOS
    foreach ($adapter in $gvma) {
        if ($adapter.ParentAdapter -match $adapter.NetAdapterName) {
            Write-Host " * $($env:COMPUTERNAME) Validated $($adapter.NetAdapterName)." -ForegroundColor Cyan
        } else {
            Write-Host " * $($env:COMPUTERNAME) Failed to Match $($adapter.NetAdapterName).  Expected AdapterName in ParentAdapter." -ForegroundColor Red
            $adapter | Format-Table ComputerName,NetAdapterName,ParentAdapter -AutoSize | Out-String|ForEach-Object {Write-Host $_}
            Return New-Object PsObject -property @{completed=$False}
        }
    }
    Write-Host "$($env:COMPUTERNAME) Completed Mapping of each storage vNIC to the respective fabric." -ForegroundColor Yellow
    Write-Host "$($env:COMPUTERNAME) Begin Validating Traffic Class Configuration." -ForegroundColor Yellow
    $gnqos = Get-NetQosTrafficClass
    foreach ($qos in $gnqos) {
        if ($qos.Name -eq "SMB_Direct") { $x = @(50, "4")
        } elseif ($qos.Name -eq "Cluster") { $x = @(1, "5")
        } else { $x = @(49, "0-3,6-7") }
        if ($qos.Bandwidth -eq $x[1] -and $qos.Priority.toString() -eq $x[1]) {
            Write-Host " * $($env:COMPUTERNAME) Validated $($qos.Name)." -ForegroundColor Cyan
        } else {
            Write-Host " * $($env:COMPUTERNAME) Failed to Match $($qos.Name).  Expected:`   Bandwidth: $(x[0])`   Priority: $(x[1])" -ForegroundColor Red
            $qos | Format-Table -AutoSize | Out-String|ForEach-Object {Write-Host $_}
            Return New-Object PsObject -property @{completed=$False}
        }
    }
    Write-Host "$($env:COMPUTERNAME) Completed Validating Traffic Class Configuration." -ForegroundColor Yellow
    Write-Host "$($env:COMPUTERNAME) Begin Validating that DCBX is set to Not Willing mode." -ForegroundColor Yellow
    $gna = Get-netadapter -Name "SlotID*" | Get-NetQosDcbxSetting
    foreach ($adapter in $gna) {
        if ($adapter.Name -eq "SMB_Direct") { $x = @(50, "4")
        } elseif ($qos.Name -eq "Cluster") { $x = @(1, "5")
        } else { $x = @(49, "0-3,6-7") }
        if ($adapter.Willing -eq $False) {
            Write-Host " * $($env:COMPUTERNAME) Validated $($adapter.InterfaceAlias)." -ForegroundColor Cyan
        } else {
            Write-Host " * $($env:COMPUTERNAME) Failed to Match $($adapter.InterfaceAlias).  Expected:`   Willing: False" -ForegroundColor Red
            $adapter | Format-Table InterfaceAlias, PolicySet, Willing -AutoSize | Out-String|ForEach-Object {Write-Host $_}
            Return New-Object PsObject -property @{completed=$False}
        }
    }
    Write-Host "$($env:COMPUTERNAME) Completed Validating that DCBX is set to Not Willing mode." -ForegroundColor Yellow
    Write-Host "$($env:COMPUTERNAME) Begin Preparing disks for Storage Spaces Direct." -ForegroundColor Yellow
    $node_cluster_check = $False
    $jdata = $Using:jdata
    $cluster_check = Get-Cluster -Domain $jdata.active_directory.domain | Get-ClusterNode | Where-Object { $_.Name -eq $env:COMPUTERNAME }
    if ($cluster_check) { 
        $s2d_check = Get-ClusterStorageSpacesDirect -node $env:COMPUTERNAME
        if ($s2d_check.State -eq "Enabled") { $node_cluster_check = $True }
    }
    if ($clean_disks -or $node_cluster_check -eq $False) {
        Write-Host "$($env:COMPUTERNAME) Cleaning Storage Drives...." -ForegroundColor Green
        Update-StorageProviderCache
        Get-StoragePool | Where-Object IsPrimordial -eq $False | Set-StoragePool -IsReadOnly:$False -ErrorAction SilentlyContinue | Out-Null
        Get-StoragePool | Where-Object IsPrimordial -eq $False | Get-VirtualDisk | Remove-VirtualDisk -Confirm:$False -ErrorAction SilentlyContinue | Out-Null
        Get-StoragePool | Where-Object IsPrimordial -eq $False | Remove-StoragePool -Confirm:$False -ErrorAction SilentlyContinue | Out-Null
        Get-PhysicalDisk | Reset-PhysicalDisk -ErrorAction SilentlyContinue | Out-Null
        Get-Disk | Where-Object Number -ne $null | Where-Object IsBoot -ne $True | Where-Object IsSystem -ne $True | Where-Object PartitionStyle -ne RAW | ForEach-Object {
            $_ | Set-Disk -isoffline:$False
            $_ | Set-Disk -isreadonly:$False
            $_ | Clear-Disk -RemoveData -RemoveOEM -Confirm:$False
            $_ | Set-Disk -isreadonly:$True
            $_ | Set-Disk -isoffline:$True
        }
        #Inventory Storage Disks
        Get-Disk | Where-Object {Number -Ne $Null -and IsBoot -Ne $True -and IsSystem -Ne $True -and PartitionStyle -Eq RAW} | Group-Object -NoElement -Property FriendlyName | Format-Table
        Write-Host "$($env:COMPUTERNAME) Completed Preparing disk for Storage Spaces Direct" -ForegroundColor Yellow
    } elseif ($node_cluster_check -eq $True) {
        Write-Host "$($env:COMPUTERNAME) Already Configured for Storage Spaces Direct." -ForegroundColor Cyan
        Write-Host "$($env:COMPUTERNAME) Completed Preparing disks for Storage Spaces Direct." -ForegroundColor Yellow
    } else {
        Write-Host "$($env:COMPUTERNAME) Failed in Validating Storage Disk State to prepare for Storage Spaces Direct." -ForegroundColor Red
        Return New-Object PsObject -property @{completed=$False}
    }
    Return New-Object PsObject -property @{completed=$True}
}
#=============================================================================
# Setup Environment for Next Loop; Sleep 10 Minutes if reboot_count gt 0
#=============================================================================
Get-PSSession | Remove-PSSession | Out-Null
$nrc = NodeAndRebootCheck -session_results $session_results -node_list $jdata.node_list
#=============================================================================
# Test AzureStackHCI Connectivity Readiness
#=============================================================================
LoginNodeList -credential $credential -cssp $False -node_list $jdata.node_list
$sessions = Get-PSSession | Where-Object {$_.Transport -eq "WSMan"}
$sessions | Format-Table | Out-String|ForEach-Object {Write-Host $_}
if ($jdata.proxy) { $session_results = Invoke-AzStackHciConnectivityValidation -PassThru -PsSession $sessions
} else {
    if ($proxy_creds) {
        $session_results = Invoke-AzStackHciConnectivityValidation -PassThru -PsSession $sessions -Proxy $jdata.proxy.host -ProxyCredential $proxy_creds
    } else { $session_results = Invoke-AzStackHciConnectivityValidation -PassThru -PsSession $sessions -Proxy $jdata.proxy.host }
}
$test_success = $True
foreach ($result in $session_results) {
    foreach($data in $result.AdditionalData) {
        if ($data.PSComputerName) { $cluster_host = $data.PSComputerName
        } else {$cluster_host = $data.Source }
        if ($result.Status -eq "Succeeded") {
            Write-Host "$cluster_host Result: $($result.Status) Test: $($result.Name)" -ForegroundColor Green
        } else {
            Write-Host "$cluster_host Result: $($result.Status) Test: $($result.Name)" -ForegroundColor Red
            Write-Host "Test Description: $($result.Description)" -ForegroundColor Cyan
            Write-Host "Test Additional Data: $($result.AdditionalData)" -ForegroundColor Cyan
            Write-Host "Recommended Steps to Remediate: $($result.Remediation)" -ForegroundColor Cyan
            Write-Host "For Further Assistance from Microsoft Refer to the following URL:" -ForegroundColor Yellow
            Write-Host "https://learn.microsoft.com/en-us/azure-stack/hci/manage/troubleshoot-environment-validation-issues" -ForegroundColor Yellow
            $test_success = $False
        }
    }
}
if ($test_success -eq $False) {
    Write-Host "Closing Environment...Exiting Script." -ForegroundColor Yellow
    Stop-Transcript
    Exit 1
}
#=============================================================================
# Test AzureStackHCI Hardware Readiness
#=============================================================================
if ($jdata.proxy) { $session_results = Invoke-AzStackHciHardwareValidation -PassThru -PsSession $sessions
} else {
    if ($proxy_creds) {
        $session_results = Invoke-AzStackHciHardwareValidation -PassThru -PsSession $sessions -Proxy $jdata.proxy.host -ProxyCredential $proxy_creds
    } else { $session_results = Invoke-AzStackHciHardwareValidation-PassThru -PsSession $sessions -Proxy $jdata.proxy.host }
}
$test_success = $True
foreach ($result in $session_results) {
    $cluster_host = $result.TargetResourceID
    if ($result.Status -eq "Succeeded") {
        Write-Host "$cluster_host Result: $($result.Status) Test: $($result.Name)" -ForegroundColor Green
    } else {
        Write-Host "$cluster_host Result: $($result.Status) Test: $($result.Name)" -ForegroundColor Red
        Write-Host "Test Description: $($result.Description)" -ForegroundColor Cyan
        Write-Host "Test Additional Data: $($result.AdditionalData)" -ForegroundColor Cyan
        Write-Host "Recommended Steps to Remediate: $($result.Remediation)" -ForegroundColor Cyan
        Write-Host "For Further Assistance from Microsoft Refer to the following URL:" -ForegroundColor Yellow
        Write-Host "https://learn.microsoft.com/en-us/azure-stack/hci/manage/troubleshoot-environment-validation-issues"-ForegroundColor Yellow
        $test_success = $False
    }
}
if ($test_success -eq $False) {
    Write-Host "Closing Environment...Exiting Script." -ForegroundColor Yellow
    Stop-Transcript
    Exit 1
}
#=============================================================================
# Test AzureStackHCI Active Directory Readiness
#=============================================================================
$file = "AsHciADArtifactsPreCreationTool.ps1"
if (!([System.IO.File]::Exists("./$file"))) {
    Invoke-WebRequest -URI "https://raw.githubusercontent.com/scotttyso/intersight_iac/master/examples/azurestack_hci/$file" -OutFile ".\$file"
}
$ad_user = $jdata.active_directory.admin
$ad_pass = ConvertTo-SecureString $env:windows_administrator_password -AsPlainText -Force;
$adcreds = New-Object System.Management.Automation.PSCredential ($ad_user,$ad_pass)
$ad =  $jdata.active_directory 
$ad_check = Invoke-AzStackHciExternalActiveDirectoryValidation -PassThru -ActiveDirectoryServer $ad.server -ActiveDirectoryCredentials $adcreds -ADOUPath $ad.ou -ClusterName $jdata.cluster -DomainFQDN $ad.fqdn -NamingPrefix $ad.naming_prefix -PhysicalMachineNames $jdata.node_list
if ($ad_check -eq $True) { Write-Host "True" }
Add-KdsRootKey -EffectiveTime ((get-date).addhours(-10))
& ".\$file" -AsHciClusterName $jdata.cluster -AsHciDeploymentPrefix $ad.naming_prefix -AsHciDeploymentUserCredential $adcreds -AsHciOUName $ad.ou -AsHciPhysicalNodeList $jdata.node_list -DomainFQDN $ad.fqdn
#=============================================================================
# Customize the AzureStack HCI OS Environment
#=============================================================================
$CandidateClusterNode = [object[]] @($jdata.node_list[0])
LoginNodeList -credential $credential -cssp $True -node_list $CandidateClusterNode
$sessions = Get-PSSession
$session_results = Invoke-Command $sessions -scriptblock {
    Write-Host "Host Name:" $env:COMPUTERNAME -ForegroundColor Green
    Write-Host "$($env:COMPUTERNAME) Beginning the Test Cluster Script..." -ForegroundColor Yellow
    #$tcluster = Test-Cluster -Node $Using:jdata.node_list -Include "System Configuration", "Networking", "Inventory", “Storage Spaces Direct”
    Write-Host "PLEASE TAKE THE TIME TO REVIEW THE RESULTS of the TEST CLUSTER SCRIPT In the Following Location:" -ForegroundColor Cyan
    Write-Host "Computer $($env:COMPUTERNAME) " -ForegroundColor Cyan
    Write-Host "Computer $($env:COMPUTERNAME) " -ForegroundColor Cyan
    Return New-Object PsObject -property @{completed=$True}
}
#=============================================================================
# Setup Environment for Next Loop; Sleep 10 Minutes if reboot_count gt 0
#=============================================================================
Get-PSSession | Remove-PSSession | Out-Null
$nrc = NodeAndRebootCheck -session_results $session_results -node_list $jdata.node_list
Stop-Transcript
Exit 0


#=============================================================================
# Customize the AzureStack HCI OS Environment
#=============================================================================
$CandidateClusterNode = [object[]] @($jdata.node_list[0])
LoginNodeList -credential $credential -cssp $True -node_list $CandidateClusterNode
$sessions = Get-PSSession
$session_results = Invoke-Command $sessions -scriptblock {
    Write-Host "Host Name:" $env:COMPUTERNAME -ForegroundColor Green
    $nodes = $Using:jdata.node_list
    Write-Host " Validating Cluster Nodes..." -ForegroundColor Yellow
    Test-Cluster -Node $nodes -Include "System Configuration",Networking,Inventory, “Storage Spaces Direct”
    Write-Host " Creating the cluster..." -ForegroundColor Yellow
    New-Cluster -Name $Using:cluster -Node $Using:jdata.node_list -StaticAddress $Using:jdata.cluster_address -NoStorage
    Get-Cluster | Format-Table Name, SharedVolumesRoot
    Write-Host "Host Name:" $env:COMPUTERNAME -ForegroundColor Green
    Write-Host " Checking cluster nodes..." -ForegroundColor Yellow
    Get-ClusterNode -Cluster $Using:cluster | Format-Table Name, State, Type
    Return New-Object PsObject -property @{completed=$True}
}
#=============================================================================
# Setup Environment for Next Loop; Sleep 10 Minutes if reboot_count gt 0
#=============================================================================
Get-PSSession | Remove-PSSession | Out-Null
$nrc = NodeAndRebootCheck -session_results $session_results -node_list $CandidateClusterNode
#=============================================================================
# Customize the AzureStack HCI OS Environment
#=============================================================================
$node_list = (Get-ClusterNode -Cluster $cluster).Name
LoginNodeList -credential $credential -cssp $False -node_list $node_list
$sessions = Get-PSSession
$session_results = Invoke-Command $sessions -scriptblock {
    Write-Host "Host Name:" $env:COMPUTERNAME -ForegroundColor Green
    Write-Host " Identifying and Removing Standalone Network ATC Intent." -ForegroundColor Yellow
    $intent = Get-NetIntent | Where-Object {$_.Scope -Like 'Host' -and $_.IntentName -EQ 'mgmt_compute_storage'}
    Write-Host "Removing Standalone Network ATC Intent $intent" -ForegroundColor Yellow
    Remove-NetIntent -Name $intent.IntentName
    Return New-Object PsObject -property @{completed=$True}
}
#=============================================================================
# Setup Environment for Next Loop; Sleep 10 Minutes if reboot_count gt 0
#=============================================================================
Get-PSSession | Remove-PSSession | Out-Null
$nrc = NodeAndRebootCheck -session_results $session_results -node_list $jdata.node_list
#=============================================================================
# Customize the AzureStack HCI OS Environment
#=============================================================================
LoginNodeList -credential $credential -cssp $False -node_list $jdata.node_list

$session_results = Invoke-Command $cluster -Credential $credential -authentication Credssp -scriptblock {
    Write-Host "Host Name:" $env:COMPUTERNAME -ForegroundColor Green
    Write-Host " Create and Deploy Clustered Network ATC Intent " -ForegroundColor Yellow
    #$clusterName = Get-cluster
    $QoSOverride = New-NetIntentQoSPolicyOverRides
    $AdapterOverride = New-NetIntentAdapterPropertyOverrides
    $storageOverride = new-NetIntentStorageOverrides
    $QoSOverride.PriorityValue8021Action_SMB = 4
    $QoSOverride.PriorityValue8021Action_Cluster = 5
    $AdapterOverride.NetworkDirectTechnology = 4
    $storageOverride.EnableAutomaticIPGeneration = $false
    $QoSOverride
    $AdapterOverride
    $storageOverride
    Add-NetIntent -AdapterName "SlotID 2 Port 1", "SlotID 2 Port 2" -Management -Compute -Storage -StorageVlans 107, 207 -QoSPolicyOverrides $QoSOverride -AdapterPropertyOverrides $AdapterOverride -StorageOverrides $storageoverride -Name mgmt_compute_storage

    Write-Host "Host Name:" $env:COMPUTERNAME -ForegroundColor Green
    Write-Host "Verify Clustered Network ATC Intent Status" -ForegroundColor Yellow
    $clusterName = (Get-cluster).Name
    Get-NetIntent -ClusterName $clusterName| Select-Object IntentName,scope
    Get-NetIntentStatus -ClusterName $clusterName | Select-Object Host, IntentName, ConfigurationStatus, ProvisioningStatus
    Return New-Object PsObject -property @{completed=$True}
}
#=============================================================================
# Setup Environment for Next Loop; Sleep 10 Minutes if reboot_count gt 0
#=============================================================================
Get-PSSession | Remove-PSSession | Out-Null
$nrc = NodeAndRebootCheck -session_results $session_results -node_list $jdata.node_list
#=============================================================================
# Customize the AzureStack HCI OS Environment
#=============================================================================
LoginNodeList -credential $credential -cssp $False -node_list $jdata.node_list

foreach ($node in $nodes) {
    Invoke-Command $node -Credential $credential -scriptblock {
        Write-Host "Host Name:" $env:COMPUTERNAME -ForegroundColor Green
        Write-Host "Verifying NIC Port Status " -ForegroundColor Yellow
        Get-netadapter | Format-Table Name, InterfaceDescription, Status, MTUSize, MacAddress, LinkSpeed
        Return New-Object PsObject -property @{completed=$True}
    }
}
#=============================================================================
# Setup Environment for Next Loop; Sleep 10 Minutes if reboot_count gt 0
#=============================================================================
Get-PSSession | Remove-PSSession | Out-Null
$nrc = NodeAndRebootCheck -session_results $session_results -node_list $jdata.node_list
#=============================================================================
# Customize the AzureStack HCI OS Environment
#=============================================================================
LoginNodeList -credential $credential -cssp $False -node_list $jdata.node_list

$session_results = Invoke-Command $cluster -Credential $credential -authentication Credssp -scriptblock {
    Write-Host "Host Name:" $env:COMPUTERNAME -ForegroundColor Green
    Write-Host " Checking cluster networks " -ForegroundColor Yellow
    $clusterName = (Get-cluster).Name
    Get-ClusterNetwork -Cluster $clusterName | Format-Table name,address,state,role -autosize

    Write-Host "Host Name:" $env:COMPUTERNAME -ForegroundColor Green
    Write-Host " Verifying cluster network interfaces " -ForegroundColor Yellow
    $clusterName = (Get-cluster).Name
    Get-ClusterNetworkInterface -Cluster $clusterName | Sort-Object Name | Format-Table Network, Name

    Write-Host " Checking Management cluster network settings " -ForegroundColor Yellow
    $clusterName = (Get-cluster).Name
    Get-ClusterNetwork -Cluster $clusterName -Name “mgmt_compute_storage(Management)” | Format-Table *

    Write-Host " Verifying Management network exclusion from Live Migration Network list " -ForegroundColor Yellow
    $clusterName = (Get-cluster).Name
    Get-ClusterResourceType -Cluster $clusterName -Name "Virtual Machine" | Get-ClusterParameter -Name MigrationExcludeNetworks | Format-Table *
    Return New-Object PsObject -property @{completed=$True}
}
$nodes = (Get-ClusterNode -Cluster $cluster).Name
#=============================================================================
# Configure Live Migration Network Services
#=============================================================================
#!#!#!#!#
LoginNodeList -credential $credential -cssp $False -node_list $jdata.node_list
$sessions = Get-PSSession
$session_results = Invoke-Command $sessions -scriptblock {
    Write-Host "Host Name:" $env:COMPUTERNAME -ForegroundColor Green
    Write-Host "Configuring Live Migration to use SMB protocol" -ForegroundColor Yellow
    Set-VMHost -VirtualMachineMigrationPerformanceOption SMB
    Get-VMHost | Format-Table VirtualMachineMigrationPerformanceOption

    Write-Host "Configuring Live Migration Bandwidth Limit: 3625MB" -ForegroundColor Yellow
    Set-SMBBandwidthLimit -Category LiveMigration -BytesPerSecond 3625MB
    Get-SMBBandwidthLimit -Category LiveMigration

    $MgmtBandwidthLimit = "10000000"
    Write-Host "Configuring management vNIC maximum bandwidth Limit: $MgmtBandwidthLimit" -ForegroundColor Yellow
    Set-VMNetworkAdapter -ManagementOS -Name "vManagement(mgmt_compute_storage)" -MaximumBandwidth $MgmtBandwidthLimit
    Write-Host "Verifying management vNIC maximum bandwidth Limit" -ForegroundColor Yellow
    (Get-VMNetworkAdapter -ManagementOS -Name "vManagement(mgmt_compute_storage)").BandwidthSetting | Format-Table ParentAdapter, MaximumBandwidth
    Return New-Object PsObject -property @{completed=$True} 
}
#=============================================================================
# Setup Environment for Next Loop
#=============================================================================
Get-PSSession | Remove-PSSession | Out-Null
$nrc = NodeAndRebootCheck -session_results $session_results -node_list $jdata.node_list
#=============================================================================
# Configure File Share Witness if Domain Based
#=============================================================================
if ($jdata.file_share_witness.type -eq "domain") {
    $node_list = [object[]] @($jdata.file_share_witness.host)
    LoginNodeList -credential $credential -cssp $False -node_list $node_list
    $sessions = Get-PSSession
    $session_results = Invoke-Command $sessions -ScriptBlock {
        $jdata      = $Using:jdata
        $domain     = $jdata.file_share_witness.domain
        $witness    = $jdata.file_share_witness.host
        $share_name = $jdata.file_share_witness.share_name
        $share_path = "$($jdata.file_share_witness.share_path)\$share_name"
        #Create Directory on File Share Witness
        Write-Host "$($witness): Begin Creating directory on File Share Witness." -ForegroundColor Yellow
        $test_dir = Test-Path -PathType Container $share_path
        if (!($test_dir)) { New-Item -ItemType Directory -Force $share_path | Out-Null }
        $test_dir = Test-Path -PathType Container $share_path
        if (!($test_dir)) {
            Write-Host "Failed Creating Directory $($share_path).  Exiting..." -ForegroundColor Red
            Return New-Object PsObject -property @{completed=$False}
        }
        Write-Host "$($witness): Completed Creating directory on File Share Witness." -ForegroundColor Yellow
        Write-Host "$($witness): Begin Configuring File Share on File Share Witness" -ForegroundColor Yellow
        $access_list  = @()
        foreach ($computer in $Using:nrc.computer_names) { $access_list.Add("$domain\$($computer)$") }
        $access_list.Add(“$domain\Domain Admins")
        $gsmb = Get-SmbShare -Name $share_name
        $share_assigned = $True
        foreach ($access in $access_list) { if (!($gsmb | Where-Object {$_.AccountName -eq $access})) { $share_assigned = $False }}
        if ($share_assigned -eq $False) {
            Write-Host "$($witness): Adding File Share $share_name on File Share." -ForegroundColor Green
            $gsmb = New-SmbShare -Name $share_name -Path $share_path -FullAccess $access_list | Out-Null
        } else { $gsmb = Get-SmbShare -Name $share_name }
        $share_assigned = $True
        foreach ($access in $access_list) { if (!($gsmb | Where-Object {$_.AccountName -eq $access})) { $share_assigned = $False }}
        if ($share_assigned -eq $False) {
            Write-Host "$($witness): Failed to Configure File Share: $share_name." -ForegroundColor Red
            Return New-Object PsObject -property @{completed=$False}
        }
        Write-Host "$($witness): Completed Configuring File Share on File Share Witness" -ForegroundColor Yellow
        #NOT SURE ON THIS
        #Verify file share permissions on the file share witness
        #Write-Host "Verifing file share permissions on the file share witness"
        #Get-SmbShareAccess -Name $share_name | Format-Table -AutoSize
        #Set file level permissions on the file share directory that match the file share permissions
        Write-Host "$($witness): Begin Setting file level permissions on $share_name." -ForegroundColor Yellow
        $gsmb = Get-SmbShare -Name $share_name
        $share_access = $True
        foreach ($access in $access_list) { if (!($gsmb | Where-Object {$_.Access -match "$($access).+Allow.+FullControl"})) { $share_access = $False }}
        if ($share_access -eq $False) {
            Write-Host "$($witness): Adding File Share: '$share_name' Access Settings." -ForegroundColor Green
            $gsmb = Set-SmbPathAcl -ShareName $share_name | Out-Null
        } else { $gsmb = Set-SmbPathAcl -ShareName $share_name }
        $share_access = $True
        foreach ($access in $access_list) { if (!($gsmb | Where-Object {$_.Access -match "$($access).+Allow.+FullControl"})) { $share_access = $False }}
        if ($share_access -eq $False) {
            Write-Host "$($witness): Failed to Configure File Share: '$share_name' Access Settings." -ForegroundColor Red
            Return New-Object PsObject -property @{completed=$False}
        }
        Write-Host "$($witness): Completed Setting file level permissions on $share_name." -ForegroundColor Yellow
        Return New-Object PsObject -property @{completed=$True}
    }
    #=============================================================================
    # Setup Environment for Next Loop
    #=============================================================================
    Get-PSSession | Remove-PSSession | Out-Null
    $nrc = NodeAndRebootCheck -session_results $session_results -node_list $jdata.node_list
    #=============================================================================
    # Configure Cluster Quorum Witness File Share
    #=============================================================================
    LoginNodeList -credential $credential -cssp $False -node_list [object[]] @($cluster)
    $sessions = Get-PSSession
    $session_results = Invoke-Command $sessions -scriptblock {
        $jdata      = $Using:jdata
        $witness    = $jdata.file_share_witness.host
        $share_name = $jdata.file_share_witness.share_name
        Write-Host "$($cluster): Begin Setting Cluster Witness File Share: '\\$witness\$share_name'." -ForegroundColor Yellow
        $gcq = Get-ClusterQuorum
        if (!($gcq | Where-Object {$_.FileShareWitness -eq "\\$witness\$share_name" })) {
            Write-Host "$($cluster): Adding Cluster Quorum Witness File Share: '\\$witness\$share_name'." -ForegroundColor Green
            Set-ClusterQuorum -Cluster $Cluster -FileShareWitness "\\$witness\$share_name"
        } else { Write-Host "$($cluster): Cluster Quorum Witness File Share: '\\$witness\$share_name' already configured." -ForegroundColor Cyan }
        $gcq = Get-ClusterQuorum
        if (!($gcq | Where-Object {$_.FileShareWitness -eq "\\$witness\$share_name" })) {
            Write-Host "$($cluster): Failed to Set Cluster Quorum Witness File Share: '\\$witness\$share_name'." -ForegroundColor Red
            Return New-Object PsObject -property @{completed=$False}
        }
        Write-Host "$($cluster): Completed Setting Cluster Witness File Share: '\\$witness\$share_name'." -ForegroundColor Yellow
        Return New-Object PsObject -property @{completed=$True}
    }
    #=============================================================================
    # Setup Environment for Next Loop
    #=============================================================================
    Get-PSSession | Remove-PSSession | Out-Null
    $nrc = NodeAndRebootCheck -session_results $session_results -node_list $jdata.node_list
}
#=============================================================================
# Configure AzureStack Cluster Wide Settings
#=============================================================================
#!#!#!#!#!#
LoginNodeList -credential $credential -cssp $True -node_list [object[]] @($cluster)
$sessions = Get-PSSession
$session_results = Invoke-Command $sessions -scriptblock {
    Get-ClusterResource -Cluster $Using:cluster -Name "File Share Witness" | Get-ClusterParameter -Name SharePath
    Write-Host "Host Name:" $env:COMPUTERNAME -ForegroundColor Green
    Write-Host " Configuring Cluster-Aware Updating ... " -ForegroundColor Yellow
    $clusterName = (Get-cluster).Name
    Add-CauClusterRole -ClusterName $clusterName -DaysOfWeek Tuesday,Saturday -IntervalWeeks 3 -MaxFailedNodes 1 -MaxRetriesPerNode 2 -EnableFirewallRules -Force
    Write-Host " Verifying Cluster-Aware Updating configuraiton " -ForegroundColor Yellow
    Get-CauClusterRole -ClusterName $clusterName | Format-Table

    Write-Host " Configuring Kernel Soft Reboot  for Cluster Aware Updating ... " -ForegroundColor Yellow
    Get-Cluster -Name $clusterName | Set-ClusterParameter -Name CauEnableSoftReboot -Value 1 -Create
    Write-Host " Verifying Kernel Soft Reboot configuraiton " -ForegroundColor Yellow
    Get-Cluster -Name $clusterName | Get-ClusterParameter -Name CauEnableSoftReboot | Format-Table Name, Value

    Write-Host " Enabling Storage Spaces Direct " -ForegroundColor Yellow
    Enable-ClusterStorageSpacesDirect -Confirm:$false

    Write-Host " Verifying Storage Pools " -ForegroundColor Yellow
    Get-StoragePool | Format-Table friendlyname, OperationalStatus, HealthStatus, IsPrimordial, IsReadonly
    Write-Host " Verifying NVMe SSD Cache Tier " -ForegroundColor Yellow
    Get-PhysicalDisk | Where-Object Usage -eq "Journal" | Format-Table FriendlyName, CanPool, HealthStatus, Usage, Size
    Write-Host " Verifying Storage Tier configuration " -ForegroundColor Yellow
    Get-storagetier | Format-Table FriendlyName, ResiliencySettingName, MediaType, NumberOfDataCopies, PhysicalDiskRedundancy

    Write-Host " Creating Virtual Disk " -ForegroundColor Yellow
    New-Volume -StoragePoolFriendlyName “S2D*” -FriendlyName VDisk01 -FileSystem CSVFS_ReFS -ResiliencySettingName Mirror -Size 4TB
    #Get-VirtualDisk
    #Get-ClusterSharedVolume | Format-Table Name,SharedVolumeInfo,OwnerNode
}
#=============================================================================
# Setup Environment for Next Loop
#=============================================================================
Get-PSSession | Remove-PSSession | Out-Null
$nrc = NodeAndRebootCheck -session_results $session_results -node_list [object[]] @($cluster)
#=============================================================================
# Disable CredSSP on Hosts
#=============================================================================
LoginNodeList -credential $credential -cssp $False -node_list $node_list
$sessions = Get-PSSession
$session_results = Invoke-Command $sessions -scriptblock {
    Write-Host "$($env:COMPUTERNAME) Beginning Disable Check of CredSSP." -ForegroundColor Yellow
    Disable-WSManCredSSP -Role Server | Out-Null
    $gwsman = Get-WSManCredSSP
    if (!($gwsman -match "This computer is not configured to receive credentials from a remote client computer")) {
        Write-Host "$($env:COMPUTERNAME) Failed to Disable WSMan Credentials." -ForegroundColor Red
        Return New-Object PsObject -property @{completed=$False}
    }
    Write-Host "$($env:COMPUTERNAME) Completed Disable Check of CredSSP." -ForegroundColor Yellow
    Return New-Object PsObject -property @{completed=$True}
}
#=============================================================================
# Setup Environment for Next Loop
#=============================================================================
Get-PSSession | Remove-PSSession | Out-Null
$nrc = NodeAndRebootCheck -session_results $session_results -node_list $node_list
#=============================================================================
# Configure Storage QoS Policies
#=============================================================================
LoginNodeList -credential $credential -cssp $False -node_list [object[]] @($cluster)
$sessions = Get-PSSession
$session_results = Invoke-Command $sessions -scriptblock {
    Write-Host "$($Using:cluster) Beginning Configuration of Storage Polices." -ForegroundColor Yellow
    $storage_qos = [System.Collections.ArrayList]@(
        @{name="Copper"  ;min=50; max=100};
        @{name="Bronze"  ;min=100;max=250};
        @{name="Gold"    ;min=50; max=100};
        @{name="Platinum";min=100;max=250};
        @{name="Silver"  ;min=50; max=100}
    )
    $gsqp = Get-StorageQoSPolicy
    foreach ($qos in $storage_qos) {
        if ($gsqp | Where-Object {$_.Name -eq $qos.name -and $_.MinimumIops -eq $qos.min -and $_.MaximumIops -eq $qos.max -and $_.PolicyType -eq "Dedicated"}) {
            Write-Host " * $($Using:cluster) Storage Policy $($qos.name) already configured." -ForegroundColor Cyan
        } elseif ($gsqp | Where-Object {$_.Name -eq $qos.name}) {
            Write-Host " * $($Using:cluster) Storage Policy $($qos.name) created, but settings incorrect...Updating." -ForegroundColor Cyan
            Get-StorageQosPolicy -Name $qos.name | Set-StorageQoSPolicy -MinimumIops $qos.min -MaximumIops $qos.max -PolicyType Dedicated
        } else {
            Write-Host " * $($Using:cluster) Creating Storage Policy $($qos.name)." -ForegroundColor Cyan
            New-StorageQoSPolicy -Name $qos.name -MinimumIops $qos.min -MaximumIops $qos.max -PolicyType Dedicated
        }
    }
    $gsqp = Get-StorageQoSPolicy
    foreach ($qos in $storage_qos.PSObject.Properties) {
        if ($gsqp | Where-Object {$_.Name -eq $qos.name -and $_.MinimumIops -eq $qos.min -and $_.MaximumIops -eq $qos.max -and $_.PolicyType -eq "Dedicated"}) {
            Write-Host " * $($Using:cluster) Storage Policy $($qos.name) Configured." -ForegroundColor Cyan
        } else {
            Write-Host " * $($Using:cluster) Failed Configuring Storage Policy $($qos.name).  Expected:" -ForegroundColor Red
            Write-Host "   MinimumIops: $($qos.min)" -ForegroundColor Red
            Write-Host "   MaximumIops: $($qos.max)" -ForegroundColor Red
            Write-Host "   PolicyType: Dedicated" -ForegroundColor Red
            Get-StorageQoSPolicy -Name $qos.name | Format-Table Name,Status, MinimumIops,MaximumIops,MaximumIOBandwidth,PolicyID
            Return New-Object PsObject -property @{completed=$False}
        }
    }
    Write-Host "$($Using:Cluster) Completed Configuration of Storage Polices." -ForegroundColor Yellow
    Return New-Object PsObject -property @{completed=$True}
}
#=============================================================================
# Cleanup Environment to Close Script
#=============================================================================
Get-PSSession | Remove-PSSession | Out-Null
$nrc = NodeAndRebootCheck -session_results $session_results -node_list [object[]] @($cluster)
Stop-Transcript
Disable-WSManCredSSP -Role "Client" | Out-Null
Exit 0