PrepDeploy.ps1

<#
    .Synopsis
    Removes a computer from AD and SCCM, if desired.

    .Description
    Passing the -Destroy flag creates a text file with the groups the computer object was a member of and then removes the object from both AD and SCCM. Passing the -Redeploy flag creates a text file with the groups the computer object was a member of and then deletes the object only from AD.

    .Example
    PrepDeploy.ps1 bulbasaur -Destroy
    Succesful output will be:
    Searching for bulbasaur in Active Directory... Success!
    Retrieving current group membership... Success!
    Storing group membership... Success!
    Removing from Active Directory... Success!
    Removing from SCCM... Success!

    .Example
    PrepDeploy.ps1 bulbasaur -Redeploy
    Succesful output will be:
    Searching for bulbasaur in Active Directory... Success!
    Retrieving current group membership... Success!
    Storing group membership... Success!
    Removing from Active Directory... Success!
#>

param(
    [Parameter(Mandatory=$true)][String] $CompName,
    [switch]$Destroy,
    [switch]$Redeploy
)

$Is64Bit = $false

Import-Module ActiveDirectory
## Only import this module if the shell is 32-bit
if ([IntPtr]::size -eq 4) {
    Import-Module "C:\Program Files (x86)\Microsoft Configuration Manager\AdminConsole\bin\ConfigurationManager.psd1"
} else{
    $Is64Bit = $true
}
$SCCMServer = "Itzamna"
$epoServer="https://asgard:8443"
$SiteName = "KAT"
$LogFilePath = "\\idunn\installedsoftware\groups"
$Success = 'Write-Host -ForegroundColor Green "Success!"'
$Failed = 'Write-Host -ForegroundColor Red "Failed!"'

## Test whether the current shell is 64-bit or 32-bit.
## Test the size of an Int Pointer for backwards compatability
function test-32Bit{
    if ([IntPtr]::size -eq 4){
        return $true
    } else{
        return $false
    }
}

## This function tests if the computer exsists in Active Directory.
## If the computer exists then it will return the computer object.
## If the computer doesn't exist in Active Directory then the function returns $null.
function test-ADComp{
    Write-Host -NoNewline "Searching for $CompName in Active Directory... "
    try{
        $ComputerObject = Get-ADComputer $CompName
        invoke-expression $Success
    }catch{
        $ComputerObject = $NULL
        Write-Host -ForegroundColor Red "Doesn't Exist"
    }
    return $ComputerObject
}

## This function stores list of AD groups in a text file to a specified location.
## Inputs: It takes an object with the list of AD groups. 
## Outputs: Stores the list to a text file. 
function store-GroupMembership{
param(
    [object]$Groups
)
    Write-Host -NoNewline "Storing group membership... "
    try {
	    $Groups | Sort-Object | Select-Object -ExpandProperty Name | Out-File "$LogFilePath\$CompName.txt" -Encoding ASCII -Force
        Invoke-Expression $Success
	} catch {
        Invoke-Expression $Failed
    }
}

## This function retrieves what AD groups the computer is a member of. 
## Input: AD Computer object.
## Output: Calls store-GroupMembership to store the group list.
function get-GroupMembership{
    param(
        [object]$computerobject = $null
    )
    Write-Host -NoNewline "Retrieving current group membership... "
    try{
        $Groups = Get-ADPrincipalGroupMembership ($ComputerObject.DistinguishedName)
        Invoke-Expression $Success
        store-GroupMembership $Groups
    }catch{
        Write-Host -ForegroundColor Red "Couldn't Get Group Membersheip"
        Write-Host -ForegroundColor Red "Exiting Script."
    }
}

## This function deletes the computer from AD.
## Input: AD Computer Object
## Output: Will out Success and Failed. 
function remove-ComputerAD{
    param(
        [object]$ComputerObject
    )

    ## Used to see if the computer is a VM or not. 
    $filter = "(&(objectClass=serviceConnectionPoint)(CN=Windows Virtual Machine))" 
    $isVM = Get-ADObject –LDAPFilter $filter | select -ExpandProperty Distinguishedname | where{$_ -match $CompName}
    
    ## Start the deleteing processes.
    Write-Host -NoNewline "Removing from Active Directory... "
    if($isVM -eq $null){
        try{
            Remove-ADObject -Identity ($ComputerObject.DistinguishedName) -Confirm:$false
            Invoke-Expression $Success
        }catch{
            Invoke-Expression $Failed
        }
      
    }else{
        try{
            Remove-ADObject -Identity ("CN=Windows Virtual Machine," + $ComputerObject.DistinguishedName) -Confirm:$false 
            Invoke-Expression $Success
        }catch{
            Invoke-Expression $Failed
        }
    }
}


## This Function deletes the computer from SCCM
function remove-ComputerSCCM{
    Write-Host -NoNewline "Removing from SCCM... "
    try {
		# Find all instances (even 'Obselete' and non-'Active' instances)
		# of the computer in SCCM's database.
		$ResourceID = Get-WmiObject	-ComputerName $SCCMServer `
							-Query "SELECT ResourceID FROM SMS_R_System WHERE Name LIKE `'$CompName`'" `
							-Namespace "root\sms\site_$SiteName"
		# Delete each object.
        if ($ResourceID -ne $null)
        {
	        $ResourceID | ForEach-Object { 
		        $CompResource = [wmi]$_.__PATH
		        $CompResource.psbase.delete()
            }
            Invoke-Expression $Success
        }
        else
        {
            Write-Host -ForegroundColor Red "Doesn't Exist"
        }
    }catch{
        Invoke-Expression $failed
    }
}

#This function removes the computer object from the ePo sever
#Many thanks to the people here https://community.mcafee.com/thread/42284
#whose code is a very big influence on the code in this function
function remove-ePo{
    #Allows server certificate validation
    [System.Net.ServicePointManager]::ServerCertificateValidationCallback = {$true}
    $passed = $false
    while ($passed -eq $false) {
        #Asks for ePo credentials and saves as variables
        $Credential=Get-Credential -Message "Enter ePO Credentials:"
        $epoUser=$Credential.GetNetworkCredential().username
        $epoPassword=$Credential.GetNetworkCredential().password

        #Creates WebClient to pass commands through
        $wc=new-object System.net.WebClient
        $wc.Credentials = new-object System.Net.NetworkCredential -ArgumentList ($epoUser, $epoPassword)

        #Passes the computer name to the delete command, loops if credentials are entered incorrectly
        $passed = $true
        try {
            $wc.DownloadString("$epoServer/remote/system.delete?names=$CompName")
        }
        catch [system.management.automation.methodinvocationexception] {
            $error[0]
            Write-Host "Username or password incorrect"
            $passed = $false
        }
    }
}

#This function clears the Required PXE Deployments on the Computer object
#in SCCM, so that it can initiate a new task sequence deployment.
function clear-PXE{
    & $env:systemroot\SysWOW64\WindowsPowerShell\v1.0\powershell.exe `
        "Import-Module 'C:\Program Files (x86)\Microsoft Configuration Manager\AdminConsole\bin\ConfigurationManager.psd1'; `
        Push-Location ${SiteName}:; `
        Clear-CMPxeDeployment -DeviceName $CompName; ` 
        Pop-Location;"
}

if (($Destroy -eq $True) -and ($Redeploy -eq $True))
{
    Write-Host -ForegroundColor Red "Both Destroy and Redeploy can't be selected together, please select only one."
}

elseif ($Destroy -eq $True)
{
    $ADObject = test-ADComp $CompName
    if($ADObject -ne $null){
        get-GroupMembership $ADObject
        remove-ComputerAD $ADObject
    }
    remove-ComputerSCCM;
    remove-epo
}
elseif ($Redeploy -eq $True)
{
    $ADObject = test-ADComp $CompName
    if($ADObject -ne $null){
        get-GroupMembership $ADObject
        remove-ComputerAD $ADObject
        clear-PXE
    }
    remove-ePo
}

else
{
    Write-Host -ForegroundColor Red "Please specify flag:"
    Write-Host -ForegroundColor Red "-Destroy if you want to delete from AD and SCCM"
    Write-Host -ForegroundColor Red "-Redeploy if you want to delete from AD only"
}