Deploying Powershell and Shell Scripts in Systems Manager

macOS - Create a file at a location 

#!/bin/sh

# Get the current local username
current_user=$(stat -f "%Su" /dev/console)

# Set the file path
path="/Users/${current_user}/Desktop"
file="${path}/hello.txt"
file_contents='Script text in here.'

# Make directory if it does not already exist
mkdir -p "${path}"

# Create file with contents
echo "${file_contents}" > "${file}"

# Change permissions to allow the current user to open the file
chmod 777 "${file}"

exit 0

macOS - Cisco Secure Client AnyConnect Configuration .xml 

This will create the profile.xml file in /opt/cisco/secureclient/vpn/profile/ for macOS. 

#!/bin/sh

profile_xml_path=/opt/cisco/secureclient/vpn/profile #for AnyConnect 4.1X and lower use /opt/cisco/anyconnect/profile
profile_xml_file=/opt/cisco/secureclient/vpn/profile/profile.xml # for AnyConnect 4.1X and lower use /opt/cisco/anyconnect/profile/profile.xml

mkdir -p ${profile_xml_path}
cat <<EOF>${profile_xml_file}
<?xml version="1.0" encoding="UTF-8"?>
<AnyConnectProfile xmlns="http://schemas.xmlsoap.org/encoding/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://schemas.xmlsoap.org/encoding/ AnyConnectProfile.xsd">
    <ClientInitialization>
        <UseStartBeforeLogon UserControllable="false">true</UseStartBeforeLogon>
        <AutomaticCertSelection UserControllable="false">true</AutomaticCertSelection>
        <ShowPreConnectMessage>false</ShowPreConnectMessage>
        <CertificateStore>All</CertificateStore>
        <CertificateStoreMac>All</CertificateStoreMac>
        <CertificateStoreLinux>All</CertificateStoreLinux>
        <CertificateStoreOverride>true</CertificateStoreOverride>
        <ProxySettings>Native</ProxySettings>
        <AllowLocalProxyConnections>false</AllowLocalProxyConnections>
        <AuthenticationTimeout>30</AuthenticationTimeout>
        <AutoConnectOnStart UserControllable="false">true</AutoConnectOnStart>
        <MinimizeOnConnect UserControllable="false">true</MinimizeOnConnect>
        <LocalLanAccess UserControllable="false">false</LocalLanAccess>
        <DisableCaptivePortalDetection UserControllable="false">false</DisableCaptivePortalDetection>
        <ClearSmartcardPin UserControllable="false">true</ClearSmartcardPin>
        <IPProtocolSupport>IPv4,IPv6</IPProtocolSupport>
        <AutoReconnect UserControllable="false">true
            <AutoReconnectBehavior UserControllable="false">ReconnectAfterResume</AutoReconnectBehavior>
        </AutoReconnect>
        <SuspendOnConnectedStandby>false</SuspendOnConnectedStandby>
        <AutoUpdate UserControllable="false">true</AutoUpdate>
        <RSASecurIDIntegration UserControllable="false">Automatic</RSASecurIDIntegration>
        <WindowsLogonEnforcement>SingleLocalLogon</WindowsLogonEnforcement>
        <LinuxLogonEnforcement>SingleLocalLogon</LinuxLogonEnforcement>
        <WindowsVPNEstablishment>LocalUsersOnly</WindowsVPNEstablishment>
        <LinuxVPNEstablishment>LocalUsersOnly</LinuxVPNEstablishment>
        <PPPExclusion UserControllable="false">Disable
            <PPPExclusionServerIP UserControllable="false"></PPPExclusionServerIP>
        </PPPExclusion>
        <EnableScripting UserControllable="false">false</EnableScripting>
        <EnableAutomaticServerSelection UserControllable="false">false
            <AutoServerSelectionImprovement>20</AutoServerSelectionImprovement>
            <AutoServerSelectionSuspendTime>4</AutoServerSelectionSuspendTime>
        </EnableAutomaticServerSelection>
        <RetainVpnOnLogoff>true
            <UserEnforcement>AnyUser</UserEnforcement>
        </RetainVpnOnLogoff>
        <CaptivePortalRemediationBrowserFailover>true</CaptivePortalRemediationBrowserFailover>
        <AllowManualHostInput>true</AllowManualHostInput>
    </ClientInitialization>
    <ServerList>
        <HostEntry>
            <HostName>Host</HostName>
            <HostAddress>host:port</HostAddress>
        </HostEntry>
    </ServerList>
</AnyConnectProfile>
EOF

chmod 777 ${profile_xml_file}

exit 0

macOS - Add timestamp text to a file on desktop (schedule script test file

Create a file on macOS desktop of the currently logged in user and update it with the current timestamp. This can be used when testing scheduled script re-run frequencies. 

#!/bin/sh

echo 'Starting script...'

# Get the current local username
current_user=$(stat -f "%Su" /dev/console)

echo "current_user is: ${current_user}"

# Set the file path
path="/Users/${current_user}/Desktop"
file="${path}/script-schedule-test.txt"

# Check if the file exists
if [ ! -f "${file}" ]; then
    echo "File does not exist. Creating..."
    touch "${file}"
    chmod 777 "${file}"
fi

# Append timestamp to the file contents
timestamp=$(date +"%Y-%m-%d %T")
file_contents="Last ran by Cisco Meraki Endpoint Agent on: ${timestamp}"

# Append the updated content to the file
echo "${file_contents}" >> "${file}"

echo "Timestamp added to: ${file}"

echo 'Finished! Exiting script.'

exit 0

Windows - Cisco Secure Client AnyConnect Configuration .xml 

This will install the profile.xml configuration file for the Cisco Secure Client application on Windows 10 and Windows 11. 

## Path of VPN profile.xml. 
$profileXmlPath = 'C:\ProgramData\Cisco\Cisco Secure Client\VPN\Profile' #Cisco Secure Client (5.0+) directory, the path for 4.1X and lower is different. 

## Content of profile.xml
$profileXml = '<?xml version="1.0" encoding="UTF-8"?>
<AnyConnectProfile xmlns="http://schemas.xmlsoap.org/encoding/" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://schemas.xmlsoap.org/encoding/ AnyConnectProfile.xsd">
    <ClientInitialization>
        <UseStartBeforeLogon UserControllable="false">true</UseStartBeforeLogon>
        <AutomaticCertSelection UserControllable="false">true</AutomaticCertSelection>
        <ShowPreConnectMessage>false</ShowPreConnectMessage>
        <CertificateStore>All</CertificateStore>
        <CertificateStoreMac>All</CertificateStoreMac>
        <CertificateStoreLinux>All</CertificateStoreLinux>
        <CertificateStoreOverride>true</CertificateStoreOverride>
        <ProxySettings>Native</ProxySettings>
        <AllowLocalProxyConnections>false</AllowLocalProxyConnections>
        <AuthenticationTimeout>30</AuthenticationTimeout>
        <AutoConnectOnStart UserControllable="false">true</AutoConnectOnStart>
        <MinimizeOnConnect UserControllable="false">true</MinimizeOnConnect>
        <LocalLanAccess UserControllable="false">true</LocalLanAccess>
        <DisableCaptivePortalDetection UserControllable="false">false</DisableCaptivePortalDetection>
        <ClearSmartcardPin UserControllable="false">true</ClearSmartcardPin>
        <IPProtocolSupport>IPv4,IPv6</IPProtocolSupport>
        <AutoReconnect UserControllable="false">true
            <AutoReconnectBehavior UserControllable="false">ReconnectAfterResume</AutoReconnectBehavior>
        </AutoReconnect>
        <SuspendOnConnectedStandby>false</SuspendOnConnectedStandby>
        <AutoUpdate UserControllable="false">true</AutoUpdate>
        <RSASecurIDIntegration UserControllable="false">Automatic</RSASecurIDIntegration>
        <WindowsLogonEnforcement>SingleLocalLogon</WindowsLogonEnforcement>
        <LinuxLogonEnforcement>SingleLocalLogon</LinuxLogonEnforcement>
        <WindowsVPNEstablishment>LocalUsersOnly</WindowsVPNEstablishment>
        <LinuxVPNEstablishment>LocalUsersOnly</LinuxVPNEstablishment>
        <PPPExclusion UserControllable="false">Disable
            <PPPExclusionServerIP UserControllable="false"></PPPExclusionServerIP>
        </PPPExclusion>
        <EnableScripting UserControllable="false">false</EnableScripting>
        <EnableAutomaticServerSelection UserControllable="false">false
            <AutoServerSelectionImprovement>20</AutoServerSelectionImprovement>
            <AutoServerSelectionSuspendTime>4</AutoServerSelectionSuspendTime>
        </EnableAutomaticServerSelection>
        <RetainVpnOnLogoff>true
            <UserEnforcement>AnyUser</UserEnforcement>
        </RetainVpnOnLogoff>
        <CaptivePortalRemediationBrowserFailover>true</CaptivePortalRemediationBrowserFailover>
        <AllowManualHostInput>false</AllowManualHostInput>
    </ClientInitialization>
    <ServerList>
        <HostEntry>
            <HostName>${mxHostName}</HostName>
            <HostAddress>${mxHostAddress}:${mxVpnPort}</HostAddress>
        </HostEntry>
    </ServerList>
</AnyConnectProfile>'

## Create the new profile.xml file in the directory. 
New-item -Force -Path $profileXmlPath -Name "profile.xml" -ItemType "file" -Value $profileXml