WHfB_IntranetSites.ps1

#Registry enties for Windows Hello for Business
param
(
  [parameter(HelpMessage="Public facing domain. e.g. contoso.com")]
  [string]$VanityDomain,
  [parameter(HelpMessage="Internal AD DNS domain. e.g. netbios.local")]
  [string]$ADDNSDomain,
  [parameter(HelpMessage="BASE-64 exported root certificate file name. e.g. myRoot.cer")]
  [string]$CertName
)

$Hive = "HKLM"
$Data = @(
    @{
        hive = $Hive
        path = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\$VanityDomain"
        type = "DWORD"
        name = "*"
        data = "00000001"
    }
    @{
        hive = $Hive
        path = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\$ADDNSDomain"
        type = "DWORD"
        name = "*"
        data = "00000001"
    }
    @{
        hive = $Hive
        path = "Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\1"
        type = "DWORD"
        name = "2103"
        data = "00000000"
    }
    @{
        hive = $Hive
        path = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\microsoftonline.com\device.login"
        type = "DWORD"
        name = "https"
        data = "00000001"
    }
    @{
        hive = $Hive
        path = "Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\microsoftazuread-sso.com\autologon"
        type = "DWORD"
        name = "https"
        data = "00000001"
    }

    
)

$Output = @()
foreach($item in $Data)
{
    #$item.path
    if(-Not(Test-Path -Path "$($item.hive):\$($item.path)"))
    {
        Write-Host "Creating key..."
        New-Item -Path "$($item.hive):\$($item.path)" -Force
    }
       
    Get-Item -Path "$($item.hive):\$($item.path)" | New-ItemProperty -Name $item.name -Value $item.data -PropertyType $item.type -Force | Out-Null
    $Output += "`t$($item.hive):\$($item.path)\$($item.name) Data: $($item.data)`r`n"
}

Write-Host "Registry entries created:-"
Write-Host "$Output" | Out-String

$CertPath = Join-Path $PSScriptRoot $CertName

If(-not (Test-Path -Path "filesystem::$CertPath"))
{
    Throw "Root certificate not found in '$CertPath'. It should be in the same directory as this script."
}

Import-Certificate -FilePath $CertPath -CertStoreLocation cert:\LocalMachine\Root -Verbose
Write-Host "Root certificate imported."