Настройка репликации SYSVOL с помощью утилиты Robocopy

param (
    [string]$action,
    [string[]]$hosts,
    [string]$runInterval = "00:30:00",
    [string]$accName = "msa_sysvol"
)

$workFolder = "C:\sysvol_repl"
$taskName = "sysvol_repl"
$workTimeout = "00:10:00"

function msaAccountCreate {
    param (
        [string]$msaName
    )

    try {
        $Msa = Get-ADServiceAccount -Identity $msaName
        echo "Using existing account '$msaName'"
    } catch {}

    if (!$Msa) {
        echo "Creating account '$msaName'"
        New-ADServiceAccount -SamAccountName $msaName -Name $msaName -RestrictToSingleComputer -Enabled $True
        $Server = Get-ADComputer -identity $env:ComputerName
        $Msa = Get-ADServiceAccount -Identity $msaName
        Add-ADGroupMember -Identity "Domain Admins" -Members $Msa
        Add-ADComputerServiceAccount -Identity $Server -ServiceAccount $Msa.SamAccountName
        Install-ADServiceAccount -Identity $Msa.SamAccountName
    }

    Test-ADServiceAccount -Identity $Msa.SamAccountName | Out-Null
}

function scheduleTask {
    param (
        [string]$user
    )

    $task = Get-ScheduledTask -TaskName $taskName -ErrorAction SilentlyContinue
    if ($task) {
        Unregister-ScheduledTask -TaskName $taskName -Confirm:$false
    }

    $action = New-ScheduledTaskAction -Execute "PowerShell" -Argument "$workFolder\sysvol_repl.ps1 replicate $hosts"
    $trigger = New-ScheduledTaskTrigger -Once -At (Get-Date) -RepetitionInterval ([Timespan]::Parse($runInterval))
    $principal = New-ScheduledTaskPrincipal -UserId "$($env:UserDomain)\$($user)$" -LogonType Password -RunLevel Highest
    $settings = New-ScheduledTaskSettingsSet -RunOnlyIfNetworkAvailable -WakeToRun -ExecutionTimeLimit ([Timespan]::Parse($workTimeout))
    $task = New-ScheduledTask -Action $action -Principal $principal -Trigger $trigger -Settings $settings
    Register-ScheduledTask -TaskName $taskName -InputObject $task

}

function install {
    param (
        [string]$accName
    )
    if (!(Test-Path $workFolder -PathType Container)) {
        New-Item -ItemType Directory -Force -Path $workFolder
    }
    if ($PSScriptRoot -ne $workFolder) {
        cp "$PSCommandPath" "$workFolder\sysvol_repl.ps1"
    }
    msaAccountCreate $accName
    echo "Scheduling SYSVOL replication task '$taskName' to run every $runInterval"
    scheduleTask $accName | Out-Null
}

function runCopy {
    param (
        [string]$path,
        [string]$logFile,
        [string]$opts
    )
    robocopy $env:SYSTEMROOT\SYSVOL\sysvol\$path \\$hst\SYSVOL\$path $opts /R:0 /MT /COPY:DATSO /DCOPY:DAT /FP /NDL /NJH /NJS /UNILOG+:$logFile | Out-Null
}

function sysvolReplicate {
    $dateStart = Get-Date -Format "yyyy-MM-dd"
    $logFile = "$workFolder\sysvol_repl_$($env:UserName)_$($dateStart).log"

    foreach ($hst in $hosts) {
        $dateTimeStart=Get-Date -Format "yyyy-MM-dd HH:mm:ss"
        echo "$dateTimeStart | $($env:UserName) | running SYSVOL replication for $hst" >> $logFile
        runCopy $env:UserDNSDomain\ $logFile
        runCopy $env:UserDNSDomain\Policies\ $logFile /MIR
        runCopy $env:UserDNSDomain\scripts\ $logFile /MIR
    }
}

if ($action -eq "install") {
    $res = Get-WindowsFeature "AD-Domain-Services"
    if (!$res) {
        echo "ERROR: AD-Domain-Services is not installed on the host"
        exit 1
    }
    install $accName
} else {
    sysvolReplicate
}