bootstrap

1_bootstrap.ps1

iex ((New-Object System.Net.WebClient).DownloadString('https://chocolatey.org/install.ps1'))
Enable-Psremoting -force -SkipNetworkProfileCheck
choco install -y git -params '"/GitOnlyOnPath"'
Install-PackageProvider -Name NuGet -Force
find-module -Repository PSGallery -Name PowerShellGet | Install-Module -Force
find-module -Repository PSGallery -Name PSScriptAnalyzer | Install-Module -Force
find-module -Repository PSGallery -Name Pester | Install-Module -Force -SkipPublisherCheck
Find-Module -Name xComputerManagement -Repository PSGallery | Install-Module -Force
Find-Module -Name xRemoteDesktopAdmin -Repository PSGallery | Install-Module -Force
Find-Module -Name xWinRm -Repository PSGallery | Install-Module -Force
$env:Path += ";$env:ProgramFiles\Git\cmd"

2_CreateDSC.ps1

configuration mdtnodomain {

Import-DscResource -ModuleName PsDesiredStateConfiguration
Import-DscResource -ModuleName xComputerManagement
Import-DscResource -ModuleName xRemoteDesktopAdmin
Import-DscResource -ModuleName xWinRM
node LOCALHOST {

    xRemoteDesktopAdmin RemoteDesktopSettings
        {
           Ensure = 'Present'
           UserAuthentication = 'Secure'
        }

    xWinRM WinRMHTTPS
        {
          Protocol = "HTTPS"
          Ensure = "Present"
          Service_AllowUnencrypted = 'false'
        }

    Script DisableDomainFirewall 
        {
            GetScript = {
                @{
                    GetScript = $GetScript
                    SetScript = $SetScript
                    TestScript = $TestScript
                    Result = -not('True' -in (Get-NetFirewallProfile -Name "Public").Enabled)
                }
            }
        
            SetScript = {
                Set-NetFirewallProfile -Name "Public" -Enabled False -Verbose
            }
        
            TestScript = {
                $Status = -not('True' -in (Get-NetFirewallProfile -Name "Public").Enabled)
                $Status -eq $True
            }
        }
    
        
    Registry "DisableIPV6" #ResourceName
        {
            Key = "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters"
            ValueName = "DisabledComponents"
            ValueData = "255"
            ValueType = "DWORD"
        }

}


}

[DSCLocalConfigurationManager()]
configuration LCMConfig
{
    Node localhost
    {
        Settings
        {
            RebootNodeIfNeeded = $true
        }
    }
}

mdtnodomain
LCMConfig

3_ApplyDSC.ps1

Start-Transcript ("${env:SystemRoot}\Temp\DSC.log")
Set-DscLocalConfigurationManager -Path "C:\Windows\Temp\mdtnodomain\LCMConfig" -Verbose -Force
Start-DscConfiguration -Path "C:\Windows\Temp\mdtnodomain\mdtnodomain" -Verbose -Wait -Force
& "C:\Windows\Temp\mdtnodomain\CitrixOptimizer\CtxOptimizerEngine.ps1" -Source "C:\Windows\Temp\mdtnodomain\CitrixOptimizer\Templates\Citrix_Windows10_1803.xml" -Mode Execute -OutputXml "${env:SystemRoot}\Temp\ctxopt.xml"
Set-Item WSMan:\localhost\client\TrustedHosts -Value '*' -confirm:$false -Force
Start-DscConfiguration -Path "C:\Windows\Temp\mdtnodomain\mdtnodomain" -Verbose -Wait -Force
Stop-Transcript