Install and Configure MakeMeAdmin Settings with PowerShell

while (!$MMAUser) {
	$MMAUser = Read-Host -Prompt "Enter Username [$MMAUser] "
}

#If the path does not yet exist, create the registry keys. When you call this command, it ERASES the current registry key so we cannot get the previous entries. So only do this if it doesn't exist.
if(!(Test-Path 'HKLM:\SOFTWARE\Policies\Sinclair Community College\Make Me Admin')){
    New-Item -Path 'HKLM:\SOFTWARE\Policies\Sinclair Community College' -Force
    New-Item -Path 'HKLM:\SOFTWARE\Policies\Sinclair Community College\Make Me Admin' -Force
}

#Gets all the current allowed users from the registry key, puts them into an array.
$key = @(Get-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Sinclair Community College\Make Me Admin').('Allowed Entities')

#If there is at least one administrator.
if($key.Count -ge 1){
    #Initialize a new array.
    $newvalues = @()

    #For each user in the key...
    for($i = 0; $i -le $key.Count - 1; $i++){
            if($key.Count -eq 1){
                $newvalues += $key
            }
            else{
                $newvalues += $key[$i]
            }
    }

    Remove-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Sinclair Community College\Make Me Admin' -Name 'Allowed Entities'

    New-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Sinclair Community College\Make Me Admin' -Name 'Allowed Entities' -PropertyType MultiString -Value $newvalues -Force

    Write-Verbose "New list of Allowed Entities `n" -Verbose
    $newvalues | Format-List

$key = @(Get-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Sinclair Community College\Make Me Admin').('Allowed Entities')
Write-Host "`nAllowed Users:"

$key | Format-List

while (!$MMAUser) {
	$MMAUser = Read-Host -Prompt "Enter Username [$MMAUser] "
}

    #Tests to see if make me admin is installed and configured properly by checking the path... if the path doesn't exist then the program hasn't been installed.
if(!(Test-Path 'HKLM:\SOFTWARE\Policies\Sinclair Community College\Make Me Admin')){
    New-Item -Path 'HKLM:\SOFTWARE\Policies\Sinclair Community College' -Force
    New-Item -Path 'HKLM:\SOFTWARE\Policies\Sinclair Community College\Make Me Admin' -Force
}

#Gets all the current allowed users from the registry key, puts them into an array.
$key = @(Get-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Sinclair Community College\Make Me Admin').('Allowed Entities')

#Initialize array to store names already present in registry.
$newvalues = @()

Write-Verbose "New list of Allowed Entities `n" -Verbose
$newvalues | Format-List
    }    }

$daysUntilExipration = Read-Host -Prompt "Enter Days until expiration [30] "

if (!$daysUntilExipration) {
    $daysUntilExipration = "30"
}

if ($daysUntilExipration -eq "0" -or $daysUntilExipration -eq 0){
    Remove-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Sinclair Community College\Make Me Admin' -Name 'Allowed Entities'
}
else {
$user = "SYSTEM" 

    $action = New-ScheduledTaskAction -Execute 'REG DELETE' -Argument '"HKLM\SOFTWARE\Policies\Sinclair Community College\Make Me Admin" /V Allowed Entities /F'
    #Get current date + days
    $startTime = (get-date).AddDays($daysUntilExipration).ToString("MM-dd-yyyy")
    $trigger = New-ScheduledTaskTrigger -At $startTime -Once
    Unregister-ScheduledTask -TaskName "expireMMA" -Confirm:$false -erroraction 'silentlycontinue'
    New-ScheduledTaskPrincipal -UserId SYSTEM -RunLevel Highest
    Register-ScheduledTask -Action $action -Trigger $trigger -TaskName "expireMMA" -Description "Expire Make Me Admin Accesses." -user $user -RunLevel Highest
}

function Print-Options{
	Write-Host "`nMMA CLI Interface`n1. Install-MakeMeAdmin`n2. Add-User`n3. Remove-User`n4. Get-Users`n5. Schedule-Expiration`n6. Exit"
}

Print-Options
$choice = Read-Host "`nPlease select one of the options listed above using their number."

Remove-Variable Hostname -ErrorAction Ignore
Remove-Variable Target -ErrorAction Ignore

$MMAUser = $args[0]


if(($choice -eq 2) -or ($choice -eq 3)) {
	while (!$MMAUser) {
		$MMAUser = Read-Host -Prompt "Enter Username [$MMAUser] "
	}
}

function Install-MMA{
	try{choco install makemeadmin}
	catch{Write-Warning "An error occurred when attempting to install MakeMeAdmin with chocolatey. Make sure choco is installed and try again."; Exit}
}

function Add-User{
	#If the path does not yet exist, create the registry keys. When you call this command, it ERASES the current registry key so we cannot get the previous entries. So only do this if it doesn't exist.
	if(!(Test-Path 'HKLM:\SOFTWARE\Policies\Sinclair Community College\Make Me Admin')){
		New-Item -Path 'HKLM:\SOFTWARE\Policies\Sinclair Community College' -Force
		New-Item -Path 'HKLM:\SOFTWARE\Policies\Sinclair Community College\Make Me Admin' -Force
	}

	#Gets all the current allowed users from the registry key, puts them into an array.
	$key = @(Get-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Sinclair Community College\Make Me Admin').('Allowed Entities')

	#If there is at least one administrator.
	if($key.Count -ge 1){
		#Initialize a new array.
		$newvalues = @()

		#For each user in the key...
		for($i = 0; $i -le $key.Count - 1; $i++){
				if($key.Count -eq 1){
					$newvalues += $key
				}
				else{
					$newvalues += $key[$i]
				}
		}
	

   $newvalues += $MMAUser

		Remove-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Sinclair Community College\Make Me Admin' -Name 'Allowed Entities'

		New-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Sinclair Community College\Make Me Admin' -Name 'Allowed Entities' -PropertyType MultiString -Value $newvalues -Force

		Write-Verbose "New list of Allowed Entities `n" -Verbose
		$newvalues | Format-List

}
}

function Get-Users {

	if(!(Test-Path 'HKLM:\SOFTWARE\Policies\Sinclair Community College\Make Me Admin')){
		Write-Warning "Could not detect MakeMeAdmin registry key, please make sure MMA is properly installed and try again."; Exit
	}

	$key = @(Get-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Sinclair Community College\Make Me Admin').('Allowed Entities')
	Write-Host "`nAllowed Users:"

	$key | Format-List


}
function Remove-User{

	#Tests to see if make me admin is installed and configured properly by checking the path... if the path doesn't exist then the program hasn't been installed.
	if(!(Test-Path 'HKLM:\SOFTWARE\Policies\Sinclair Community College\Make Me Admin')){
		New-Item -Path 'HKLM:\SOFTWARE\Policies\Sinclair Community College' -Force
		New-Item -Path 'HKLM:\SOFTWARE\Policies\Sinclair Community College\Make Me Admin' -Force
	}

	#Gets all the current allowed users from the registry key, puts them into an array.
	$key = @(Get-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Sinclair Community College\Make Me Admin').('Allowed Entities')

	#Initialize array to store names already present in registry.
	$newvalues = @()
	
   foreach($value in $key){
		if($value -notlike $MMAUser){
			$newvalues += $value
		}
		else{
			Write-Warning "Removing $value from list."
		}
   }

	Remove-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Sinclair Community College\Make Me Admin' -Name 'Allowed Entities'
	New-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Sinclair Community College\Make Me Admin' -Name 'Allowed Entities' -PropertyType MultiString -Value $newvalues -Force
  
	Write-Verbose "New list of Allowed Entities `n" -Verbose
	$newvalues | Format-List


}

function Add-expireMMA-Task {

	$daysUntilExipration = Read-Host -Prompt "Enter Days until expiration [30] "

	if (!$daysUntilExipration) {
		$daysUntilExipration = "30"
	}

	if ($daysUntilExipration -eq "0" -or $daysUntilExipration -eq 0){
		Remove-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Sinclair Community College\Make Me Admin' -Name 'Allowed Entities'
	}
	else {
		$user = "SYSTEM"
		$action = New-ScheduledTaskAction -Execute 'REG DELETE' -Argument '"HKLM\SOFTWARE\Policies\Sinclair Community College\Make Me Admin" /V Allowed Entities /F'
		#Get current date + days
		$startTime = (get-date).AddDays($daysUntilExipration).ToString("MM-dd-yyyy")
		$trigger = New-ScheduledTaskTrigger -At $startTime -Once
		Unregister-ScheduledTask -TaskName "expireMMA" -Confirm:$false -erroraction 'silentlycontinue'
		New-ScheduledTaskPrincipal -UserId SYSTEM -RunLevel Highest
		Register-ScheduledTask -Action $action -Trigger $trigger -TaskName "expireMMA" -Description "Expire Make Me Admin Accesses." -user $user -RunLevel Highest
	}
}

switch($choice){
	1{
		Install-MMA
	}
	2{
		Add-User
	}
	3{
		Remove-User
	}
	4{
		Get-Users
	}
	5{
		Add-expireMMA-Task
	}
	6{Exit}
}