Windows Admin Center - Tag (VM oder Host) - Powershell

# csv pfad
$csvpath = ".\wac-connections.csv"  
# wac url 
$url = "https://wac.domain.tld"  
# Modul importieren
Import-Module "$env:ProgramFiles\windows admin center\PowerShell\Modules\ConnectionTools"  
# Connections exportieren
Export-Connection $url -fileName $csvpath
# csv laden
$csv = Import-CSV -LiteralPath $csvpath -Delimiter ","  
# und bearbeiten (hier jeder Connection bestimmte Tags zuweisen, dass kannst du via Where-Object filtern wie du willst)
$csv | %{
    $_.tags = 'server|vm|testing'  
}
# CSV exportieren
$csv | Export-CSV -LiteralPath $csvpath -Delimiter "," -NoType  -Encoding UTF8  
# ... und wieder importieren
Import-Connection $url -fileName $csvpath -prune

# admin center url
$url = 'https://wac.domain.tld'  

Function Get-Params {
    param(
        [Parameter(Mandatory = $false)]
        [Uri]
        $GatewayEndpoint,
        [Parameter(Mandatory = $false)]
        [pscredential]
        $Credential
    )
    if ( $GatewayEndpoint -eq $null ) {
        try
        {
            $GatewayEndpoint = [Uri] ( Get-ItemPropertyValue 'HKCU:\Software\Microsoft\ServerManagementGateway' 'SmeDesktopEndpoint' )  
        }
        catch
        {
            throw (New-Object System.Exception -ArgumentList 'No endpoint was specified so a local gateway was assumed and it must be run at least once.')  
        }
    }
    $params = @{useBasicParsing = $true; userAgent = "PowerShell"}  
    [System.Net.ServicePointManager]::CertificatePolicy = New-Object TrustAllCertsPolicy
    $clientCertificateThumbprint = ''  
    $IsLocal = $GatewayEndpoint.IsLoopback -or ( $GatewayEndpoint.Host -eq $Env:ComputerName )
    if ( ( $GatewayEndpoint.Scheme -eq [Uri]::UriSchemeHttps ) -and $IsLocal ) {
        $clientCertificateThumbprint = (Get-ChildItem 'Cert:\CurrentUser\My' | Where-Object { $_.Subject -eq 'CN=Windows Admin Center Client' }).Thumbprint  
    }
    if ($clientCertificateThumbprint) {
        $params.certificateThumbprint = "$clientCertificateThumbprint"  
    }
    else {
        if ($Credential) {
            $params.credential = $Credential
        }
        else {
            $params.useDefaultCredentials = $True
        }
    }
    $params.uri = "$($GatewayEndpoint)/api/connections"  
    return $params
}

# get connections
$params = Get-Params $url
$params.Method = 'Get'  
$params.ContentType = 'application/json'  
$connections = (Invoke-RestMethod @params).value.properties | select id,type,name,tags,groupId

# edit connections
$connections | %{
    # assign unique id for upload
    $_.id = $_.type + "!" + $_.name  
    if($groupId){
        $_.Id = $id + "!" + $_.groupId  
    }
    # assign tags
    $_.tags = 'server','vm','testing'  
}

# upload changes
$params.Method = 'Put'  
$params.ContentType = 'application/json'  
$params.Body = $connections | ConvertTo-JSON -Depth 100
Invoke-RestMethod @params

# admin center url
$url = 'https://wac.domain.tld'    
$computers = Get-ADComputer -Filter 'operatingsystem -like "*Windows server*" -and enabled -eq "true"' | select Name,DnsHostName,@{n='Model';e={(Get-CimInstance Win32_ComputerSystem -Computername $_.Name -Property Model  -EA SilentlyContinue).Model}}  

Function Get-Params {
    param(
        [Parameter(Mandatory = $false)]
        [Uri]
        $GatewayEndpoint,
        [Parameter(Mandatory = $false)]
        [pscredential]
        $Credential
    )
    if ( $GatewayEndpoint -eq $null ) {
        try
        {
            $GatewayEndpoint = [Uri] ( Get-ItemPropertyValue 'HKCU:\Software\Microsoft\ServerManagementGateway' 'SmeDesktopEndpoint' )    
        }
        catch
        {
            throw (New-Object System.Exception -ArgumentList 'No endpoint was specified so a local gateway was assumed and it must be run at least once.')    
        }
    }
    $params = @{useBasicParsing = $true; userAgent = "PowerShell"}  
    $clientCertificateThumbprint = ''    
    $IsLocal = $GatewayEndpoint.IsLoopback -or ( $GatewayEndpoint.Host -eq $Env:ComputerName )
    if ( ( $GatewayEndpoint.Scheme -eq [Uri]::UriSchemeHttps ) -and $IsLocal ) {
        $clientCertificateThumbprint = (Get-ChildItem 'Cert:\CurrentUser\My' | Where-Object { $_.Subject -eq 'CN=Windows Admin Center Client' }).Thumbprint    
    }
    if ($clientCertificateThumbprint) {
        $params.certificateThumbprint = "$clientCertificateThumbprint"    
    }
    else {
        if ($Credential) {
            $params.credential = $Credential
        }
        else {
            $params.useDefaultCredentials = $True
        }
    }
    $params.uri = "$($GatewayEndpoint)/api/connections"    
    return $params
}

# get connections
$params = Get-Params $url
$params.Method = 'Get'    
$params.ContentType = 'application/json'    
[array]$connections = (Invoke-RestMethod @params).value.properties | select id,type,name,tags,groupId

# add missing computers to connections
$computers | ? DNSHostName -NotIn $connections.name | %{
    $connections += [pscustomobject]@{
        id = ''  
        type = 'msft.sme.connection-type.server'  
        name = $_.DnsHostName
        tags = $_.Model
        groupId = ''  
    }
}

# edit connections
$connections | %{
    # assign unique id for upload
    $_.id = $_.type + "!" + $_.name    
    if($groupId){
        $_.Id = $id + "!" + $_.groupId    
    }
    # assign corresponding tags from the computer array
    [string[]]$_.tags = $_.tags + ($computers | ? DnsHostname -eq $_.name | % Model) | select -Unique
}

# upload changes
$params.Method = 'Put'    
$params.ContentType = 'application/json'    
$params.Body = $connections | ConvertTo-JSON -Depth 100
Invoke-RestMethod @params