wingetautoupdate/Winget-AutoUpdate/functions/Get-Policies.ps1

# Function to get the Domain/Local Policies (GPO)

Function Get-Policies 
{
   # Get WAU Policies and set the Configurations Registry Accordingly
   $WAUPolicies = (Get-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Romanitho\Winget-AutoUpdate' -ErrorAction SilentlyContinue)

   if ($WAUPolicies) 
   {
      if ($($WAUPolicies.WAU_ActivateGPOManagement -eq 1)) 
      {
         $ChangedSettings = 0
         $regPath = 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Winget-AutoUpdate'
            
         if ($null -ne $($WAUPolicies.WAU_BypassListForUsers) -and ($($WAUPolicies.WAU_BypassListForUsers) -ne $($WAUConfig.WAU_BypassListForUsers))) 
         {
            $null = (New-ItemProperty -Path $regPath -Name WAU_BypassListForUsers -Value $($WAUPolicies.WAU_BypassListForUsers) -PropertyType DWord -Force -Confirm:$false)
            $ChangedSettings++
         }
         elseif ($null -eq $($WAUPolicies.WAU_BypassListForUsers) -and ($($WAUConfig.WAU_BypassListForUsers) -or $($WAUConfig.WAU_BypassListForUsers) -eq 0)) 
         {
            $null = (Remove-ItemProperty -Path $regPath -Name WAU_BypassListForUsers -Force -ErrorAction SilentlyContinue -Confirm:$false)
            $ChangedSettings++
         }

         if ($null -ne $($WAUPolicies.WAU_DisableAutoUpdate) -and ($($WAUPolicies.WAU_DisableAutoUpdate) -ne $($WAUConfig.WAU_DisableAutoUpdate))) 
         {
            $null = (New-ItemProperty -Path $regPath -Name WAU_DisableAutoUpdate -Value $($WAUPolicies.WAU_DisableAutoUpdate) -PropertyType DWord -Force -Confirm:$false)
            $ChangedSettings++
         }
         elseif ($null -eq $($WAUPolicies.WAU_DisableAutoUpdate) -and ($($WAUConfig.WAU_DisableAutoUpdate) -or $($WAUConfig.WAU_DisableAutoUpdate) -eq 0)) 
         {
            $null = (Remove-ItemProperty -Path $regPath -Name WAU_DisableAutoUpdate -Force -ErrorAction SilentlyContinue -Confirm:$false)
            $ChangedSettings++
         }

         if ($null -ne $($WAUPolicies.WAU_DoNotRunOnMetered) -and ($($WAUPolicies.WAU_DoNotRunOnMetered) -ne $($WAUConfig.WAU_DoNotRunOnMetered))) 
         {
            $null = (New-ItemProperty -Path $regPath -Name WAU_DoNotRunOnMetered -Value $($WAUPolicies.WAU_DoNotRunOnMetered) -PropertyType DWord -Force -Confirm:$false)
            $ChangedSettings++
         }
         elseif ($null -eq $($WAUPolicies.WAU_DoNotRunOnMetered) -and !$($WAUConfig.WAU_DoNotRunOnMetered)) 
         {
            $null = (New-ItemProperty -Path $regPath -Name WAU_DoNotRunOnMetered -Value 1 -PropertyType DWord -Force -Confirm:$false)
            $ChangedSettings++
         }

         if ($null -ne $($WAUPolicies.WAU_UpdatePrerelease) -and ($($WAUPolicies.WAU_UpdatePrerelease) -ne $($WAUConfig.WAU_UpdatePrerelease))) 
         {
            $null = (New-ItemProperty -Path $regPath -Name WAU_UpdatePrerelease -Value $($WAUPolicies.WAU_UpdatePrerelease) -PropertyType DWord -Force -Confirm:$false)
            $ChangedSettings++
         }
         elseif ($null -eq $($WAUPolicies.WAU_UpdatePrerelease) -and $($WAUConfig.WAU_UpdatePrerelease)) 
         {
            $null = (New-ItemProperty -Path $regPath -Name WAU_UpdatePrerelease -Value 0 -PropertyType DWord -Force -Confirm:$false)
            $ChangedSettings++
         }

         if ($null -ne $($WAUPolicies.WAU_UseWhiteList) -and ($($WAUPolicies.WAU_UseWhiteList) -ne $($WAUConfig.WAU_UseWhiteList))) 
         {
            $null = (New-ItemProperty -Path $regPath -Name WAU_UseWhiteList -Value $($WAUPolicies.WAU_UseWhiteList) -PropertyType DWord -Force -Confirm:$false)
            $ChangedSettings++
         }
         elseif ($null -eq $($WAUPolicies.WAU_UseWhiteList) -and ($($WAUConfig.WAU_UseWhiteList) -or $($WAUConfig.WAU_UseWhiteList) -eq 0)) 
         {
            $null = (Remove-ItemProperty -Path $regPath -Name WAU_UseWhiteList -Force -ErrorAction SilentlyContinue -Confirm:$false)
            $ChangedSettings++
         }

         if ($null -ne $($WAUPolicies.WAU_ListPath) -and ($($WAUPolicies.WAU_ListPath) -ne $($WAUConfig.WAU_ListPath))) 
         {
            $null = (New-ItemProperty -Path $regPath -Name WAU_ListPath -Value $($WAUPolicies.WAU_ListPath.TrimEnd(' ', '\', '/')) -Force -Confirm:$false)
            $ChangedSettings++
         }
         elseif ($null -eq $($WAUPolicies.WAU_ListPath) -and $($WAUConfig.WAU_ListPath)) 
         {
            $null = (Remove-ItemProperty -Path $regPath -Name WAU_ListPath -Force -ErrorAction SilentlyContinue -Confirm:$false)
            $ChangedSettings++
         }

         if ($null -ne $($WAUPolicies.WAU_ModsPath) -and ($($WAUPolicies.WAU_ModsPath) -ne $($WAUConfig.WAU_ModsPath))) 
         {
            $null = (New-ItemProperty -Path $regPath -Name WAU_ModsPath -Value $($WAUPolicies.WAU_ModsPath.TrimEnd(' ', '\', '/')) -Force -Confirm:$false)
            $ChangedSettings++
         }
         elseif ($null -eq $($WAUPolicies.WAU_ModsPath) -and $($WAUConfig.WAU_ModsPath)) 
         {
            $null = (Remove-ItemProperty -Path $regPath -Name WAU_ModsPath -Force -ErrorAction SilentlyContinue -Confirm:$false)
            $ChangedSettings++
         }
         if ($null -ne $($WAUPolicies.WAU_AzureBlobSASURL) -and ($($WAUPolicies.WAU_AzureBlobSASURL) -ne $($WAUConfig.WAU_AzureBlobSASURL))) 
         {
            $null = (New-ItemProperty -Path $regPath -Name WAU_AzureBlobSASURL -Value $($WAUPolicies.WAU_AzureBlobSASURL.TrimEnd(' ', '\', '/')) -Force -Confirm:$false)
            $ChangedSettings++
         }
         elseif ($null -eq $($WAUPolicies.WAU_AzureBlobSASURL) -and $($WAUConfig.WAU_AzureBlobSASURL)) 
         {
            $null = (Remove-ItemProperty -Path $regPath -Name WAU_AzureBlobSASURL -Force -ErrorAction SilentlyContinue -Confirm:$false)
            $ChangedSettings++
         }

         if ($null -ne $($WAUPolicies.WAU_NotificationLevel) -and ($($WAUPolicies.WAU_NotificationLevel) -ne $($WAUConfig.WAU_NotificationLevel))) 
         {
            $null = (New-ItemProperty -Path $regPath -Name WAU_NotificationLevel -Value $($WAUPolicies.WAU_NotificationLevel) -Force -Confirm:$false)
            $ChangedSettings++
         }
         elseif ($null -eq $($WAUPolicies.WAU_NotificationLevel) -and $($WAUConfig.WAU_NotificationLevel) -ne 'Full') 
         {
            $null = (New-ItemProperty -Path $regPath -Name WAU_NotificationLevel -Value 'Full' -Force -Confirm:$false)
            $ChangedSettings++
         }

         if ($null -ne $($WAUPolicies.WAU_UpdatesAtTime) -and ($($WAUPolicies.WAU_UpdatesAtTime) -ne $($WAUConfig.WAU_UpdatesAtTime))) 
         {
            $null = (New-ItemProperty -Path $regPath -Name WAU_UpdatesAtTime -Value $($WAUPolicies.WAU_UpdatesAtTime) -Force -Confirm:$false)
            $Script:WAUConfig = (Get-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Winget-AutoUpdate')
            $service = (New-Object -ComObject Schedule.Service)
            $service.Connect($env:COMPUTERNAME)
            $folder = $service.GetFolder('\')
            $task = $folder.GetTask('Winget-AutoUpdate')
            $definition = $task.Definition

            for ($triggerId = 1; $triggerId -le $definition.Triggers.Count; $triggerId++) 
            {
               if (($definition.Triggers.Item($triggerId).Type -eq '2') -or ($definition.Triggers.Item($triggerId).Type -eq '3')) 
               {
                  $PreStartBoundary = ($definition.Triggers.Item($triggerId).StartBoundary).Substring(0, 11)
                  $PostStartBoundary = ($definition.Triggers.Item($triggerId).StartBoundary).Substring(19, 6)
                  $Boundary = $PreStartBoundary + $($WAUPolicies.WAU_UpdatesAtTime) + $PostStartBoundary
                  $definition.Triggers.Item($triggerId).StartBoundary = $Boundary
                  break
               }
            }
            $null = $folder.RegisterTaskDefinition($task.Name, $definition, 4, $null, $null, $null)
            $ChangedSettings++
         }
         elseif ($null -eq $($WAUPolicies.WAU_UpdatesAtTime) -and $($WAUConfig.WAU_UpdatesAtTime) -ne '06:00:00') 
         {
            $null = (New-ItemProperty -Path $regPath -Name WAU_UpdatesAtTime -Value '06:00:00' -Force -Confirm:$false)
            $Script:WAUConfig = Get-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Winget-AutoUpdate'
            $service = (New-Object -ComObject Schedule.Service)
            $service.Connect($env:COMPUTERNAME)
            $folder = $service.GetFolder('\')
            $task = $folder.GetTask('Winget-AutoUpdate')
            $definition = $task.Definition

            for ($triggerId = 1; $triggerId -le $definition.Triggers.Count; $triggerId++) 
            {
               if (($definition.Triggers.Item($triggerId).Type -eq '2') -or ($definition.Triggers.Item($triggerId).Type -eq '3')) 
               {
                  $PreStartBoundary = ($definition.Triggers.Item($triggerId).StartBoundary).Substring(0, 11)
                  $PostStartBoundary = ($definition.Triggers.Item($triggerId).StartBoundary).Substring(19, 6)
                  $Boundary = $PreStartBoundary + '06:00:00' + $PostStartBoundary
                  $definition.Triggers.Item($triggerId).StartBoundary = $Boundary
                  break
               }
            }

            $null = $folder.RegisterTaskDefinition($task.Name, $definition, 4, $null, $null, $null)
            $ChangedSettings++
         }

         if ($null -ne $($WAUPolicies.WAU_UpdatesInterval) -and ($($WAUPolicies.WAU_UpdatesInterval) -ne $($WAUConfig.WAU_UpdatesInterval))) 
         {
            $null = (New-ItemProperty -Path $regPath -Name WAU_UpdatesInterval -Value $($WAUPolicies.WAU_UpdatesInterval) -Force -Confirm:$false)
            $service = (New-Object -ComObject Schedule.Service)
            $service.Connect($env:COMPUTERNAME)
            $folder = $service.GetFolder('\')
            $task = $folder.GetTask('Winget-AutoUpdate')
            $definition = $task.Definition

            for ($triggerId = 1; $triggerId -le $definition.Triggers.Count; $triggerId++) 
            {
               if (($definition.Triggers.Item($triggerId).Type -eq '2') -or ($definition.Triggers.Item($triggerId).Type -eq '3')) 
               {
                  $UpdatesAtTime = ($definition.Triggers.Item($triggerId).StartBoundary).Substring(11, 8)
                  $definition.Triggers.Remove($triggerId)
                  $triggerId -= 1
               }
            }

            $null = $folder.RegisterTaskDefinition($task.Name, $definition, 4, $null, $null, $null)

            if (!$($WAUConfig.WAU_UpdatesAtTime)) 
            {
               $null = (New-ItemProperty -Path $regPath -Name WAU_UpdatesAtTime -Value $UpdatesAtTime -Force -Confirm:$false)
               $Script:WAUConfig = (Get-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Winget-AutoUpdate')
            }

            if ($($WAUPolicies.WAU_UpdatesInterval) -ne 'Never') 
            {
               #Count Triggers (correctly)
               $service = (New-Object -ComObject Schedule.Service)
               $service.Connect($env:COMPUTERNAME)
               $folder = $service.GetFolder('\')
               $task = $folder.GetTask('Winget-AutoUpdate')
               $definition = $task.Definition
               $null = $definition.Triggers.Count
               switch ($($WAUPolicies.WAU_UpdatesInterval)) {
                  'Daily' 
                  {
                     $tasktrigger = New-ScheduledTaskTrigger -Daily -At $($WAUConfig.WAU_UpdatesAtTime)
                     break
                  }
                  'BiDaily' 
                  {
                     $tasktrigger = New-ScheduledTaskTrigger -Daily -At $($WAUConfig.WAU_UpdatesAtTime) -DaysInterval 2
                     break
                  }
                  'Weekly' 
                  {
                     $tasktrigger = New-ScheduledTaskTrigger -Weekly -At $($WAUConfig.WAU_UpdatesAtTime) -DaysOfWeek 2
                     break
                  }
                  'BiWeekly' 
                  {
                     $tasktrigger = New-ScheduledTaskTrigger -Weekly -At $($WAUConfig.WAU_UpdatesAtTime) -DaysOfWeek 2 -WeeksInterval 2
                     break
                  }
                  'Monthly' 
                  {
                     $tasktrigger = New-ScheduledTaskTrigger -Weekly -At $($WAUConfig.WAU_UpdatesAtTime) -DaysOfWeek 2 -WeeksInterval 4
                     break
                  }
               }
               if ($definition.Triggers.Count -gt 0) 
               {
                  $triggers = @()
                  $triggers += (Get-ScheduledTask -TaskName 'Winget-AutoUpdate').Triggers
                  $triggers += $tasktrigger
                  $null = (Set-ScheduledTask -TaskName 'Winget-AutoUpdate' -Trigger $triggers)
               }
               else 
               {
                  $null = (Set-ScheduledTask -TaskName 'Winget-AutoUpdate' -Trigger $tasktrigger)
               }
            }
            $ChangedSettings++
         }
         elseif ($null -eq $($WAUPolicies.WAU_UpdatesInterval) -and $($WAUConfig.WAU_UpdatesInterval) -ne 'Daily') 
         {
            $null = (New-ItemProperty -Path $regPath -Name WAU_UpdatesInterval -Value 'Daily' -Force -Confirm:$false)
            $service = (New-Object -ComObject Schedule.Service)
            $service.Connect($env:COMPUTERNAME)
            $folder = $service.GetFolder('\')
            $task = $folder.GetTask('Winget-AutoUpdate')
            $definition = $task.Definition

            for ($triggerId = 1; $triggerId -le $definition.Triggers.Count; $triggerId++) 
            {
               if (($definition.Triggers.Item($triggerId).Type -eq '2') -or ($definition.Triggers.Item($triggerId).Type -eq '3')) 
               {
                  $UpdatesAtTime = ($definition.Triggers.Item($triggerId).StartBoundary).Substring(11, 8)
                  $definition.Triggers.Remove($triggerId)
                  $triggerId -= 1
               }
            }

            $null = $folder.RegisterTaskDefinition($task.Name, $definition, 4, $null, $null, $null)

            if (!$($WAUConfig.WAU_UpdatesAtTime)) 
            {
               $null = (New-ItemProperty -Path $regPath -Name WAU_UpdatesAtTime -Value $UpdatesAtTime -Force -Confirm:$false)
               $Script:WAUConfig = (Get-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Winget-AutoUpdate')
            }

            $tasktrigger = (New-ScheduledTaskTrigger -Daily -At $($WAUConfig.WAU_UpdatesAtTime))

            # Count Triggers (correctly)
            $service = (New-Object -ComObject Schedule.Service)
            $service.Connect($env:COMPUTERNAME)
            $folder = $service.GetFolder('\')
            $task = $folder.GetTask('Winget-AutoUpdate')
            $definition = $task.Definition
            $null = $definition.Triggers.Count

            if ($definition.Triggers.Count -gt 0) 
            {
               $triggers = @()
               $triggers += (Get-ScheduledTask -TaskName 'Winget-AutoUpdate').Triggers
               $triggers += $tasktrigger
               $null = (Set-ScheduledTask -TaskName 'Winget-AutoUpdate' -Trigger $triggers)
            }
            else 
            {
               $null = (Set-ScheduledTask -TaskName 'Winget-AutoUpdate' -Trigger $tasktrigger)
            }
            $ChangedSettings++
         }

         if ($null -ne $($WAUPolicies.WAU_UpdatesAtLogon) -and ($($WAUPolicies.WAU_UpdatesAtLogon) -ne $($WAUConfig.WAU_UpdatesAtLogon))) 
         {
            if ($WAUPolicies.WAU_UpdatesAtLogon -eq 1) 
            {
               $null = (New-ItemProperty -Path $regPath -Name WAU_UpdatesAtLogon -Value $($WAUPolicies.WAU_UpdatesAtLogon) -PropertyType DWord -Force -Confirm:$false)
               $triggers = @()
               $triggers += (Get-ScheduledTask -TaskName 'Winget-AutoUpdate').Triggers
               # Count Triggers (correctly)
               $service = (New-Object -ComObject Schedule.Service)
               $service.Connect($env:COMPUTERNAME)
               $folder = $service.GetFolder('\')
               $task = $folder.GetTask('Winget-AutoUpdate')
               $definition = $task.Definition
               $triggerLogon = $false

               foreach ($trigger in $definition.Triggers) 
               {
                  if ($trigger.Type -eq '9') 
                  {
                     $triggerLogon = $true
                     break
                  }
               }
               if (!$triggerLogon) 
               {
                  $triggers += New-ScheduledTaskTrigger -AtLogOn
                  $null = (Set-ScheduledTask -TaskName 'Winget-AutoUpdate' -Trigger $triggers)
               }
            }
            else 
            {
               $null = (New-ItemProperty -Path $regPath -Name WAU_UpdatesAtLogon -Value $($WAUPolicies.WAU_UpdatesAtLogon) -PropertyType DWord -Force -Confirm:$false)
               $service = (New-Object -ComObject Schedule.Service)
               $service.Connect($env:COMPUTERNAME)
               $folder = $service.GetFolder('\')
               $task = $folder.GetTask('Winget-AutoUpdate')
               $definition = $task.Definition
               $null = $definition.Triggers.Count

               for ($triggerId = 1; $triggerId -le $definition.Triggers.Count; $triggerId++) 
               {
                  if ($definition.Triggers.Item($triggerId).Type -eq '9') 
                  {
                     $definition.Triggers.Remove($triggerId)
                     $triggerId -= 1
                  }
               }

               $null = $folder.RegisterTaskDefinition($task.Name, $definition, 4, $null, $null, $null)
            }

            $ChangedSettings++
         }
         elseif ($null -eq $($WAUPolicies.WAU_UpdatesAtLogon) -and ($($WAUConfig.WAU_UpdatesAtLogon) -or $($WAUConfig.WAU_UpdatesAtLogon) -eq 0)) 
         {
            $null = (Remove-ItemProperty -Path $regPath -Name WAU_UpdatesAtLogon -Force -ErrorAction SilentlyContinue -Confirm:$false)
            $service = (New-Object -ComObject Schedule.Service)
            $service.Connect($env:COMPUTERNAME)
            $folder = $service.GetFolder('\')
            $task = $folder.GetTask('Winget-AutoUpdate')
            $definition = $task.Definition

            for ($triggerId = 1; $triggerId -le $definition.Triggers.Count; $triggerId++) 
            {
               if ($definition.Triggers.Item($triggerId).Type -eq '9') 
               {
                  $definition.Triggers.Remove($triggerId)
                  $triggerId -= 1
               }
            }

            $null = $folder.RegisterTaskDefinition($task.Name, $definition, 4, $null, $null, $null)
            $ChangedSettings++
         }

         if ($null -ne $($WAUPolicies.WAU_UserContext) -and ($($WAUPolicies.WAU_UserContext) -ne $($WAUConfig.WAU_UserContext))) 
         {
            $null = (New-ItemProperty -Path $regPath -Name WAU_UserContext -Value $($WAUPolicies.WAU_UserContext) -PropertyType DWord -Force -Confirm:$false)

            if ($WAUPolicies.WAU_UserContext -eq 1) 
            {
               # Settings for the scheduled task in User context
               $taskAction = New-ScheduledTaskAction -Execute 'wscript.exe' -Argument "`"$($WAUConfig.InstallLocation)\Invisible.vbs`" `"powershell.exe -NoProfile -ExecutionPolicy Bypass -File `"`"`"$($WAUConfig.InstallLocation)\winget-upgrade.ps1`"`""
               $taskUserPrincipal = New-ScheduledTaskPrincipal -GroupId S-1-5-11
               $taskSettings = New-ScheduledTaskSettingsSet -Compatibility Win8 -AllowStartIfOnBatteries -DontStopIfGoingOnBatteries -ExecutionTimeLimit 03:00:00
               # Set up the task for user apps
               $task = (New-ScheduledTask -Action $taskAction -Principal $taskUserPrincipal -Settings $taskSettings)
               $null = (Register-ScheduledTask -TaskName 'Winget-AutoUpdate-UserContext' -InputObject $task -Force)
            }
            else 
            {
               $null = (Get-ScheduledTask -TaskName 'Winget-AutoUpdate-UserContext' -ErrorAction SilentlyContinue | Unregister-ScheduledTask -Confirm:$false -ErrorAction SilentlyContinue)
            }
            $ChangedSettings++
         }
         elseif ($null -eq $($WAUPolicies.WAU_UserContext) -and ($($WAUConfig.WAU_UserContext) -or $($WAUConfig.WAU_UserContext) -eq 0)) 
         {
            $null = (Remove-ItemProperty -Path $regPath -Name WAU_UserContext -Force -ErrorAction SilentlyContinue -Confirm:$false)
            $null = (Get-ScheduledTask -TaskName 'Winget-AutoUpdate-UserContext' -ErrorAction SilentlyContinue | Unregister-ScheduledTask -Confirm:$false -ErrorAction SilentlyContinue)
            $ChangedSettings++
         }

         if ($null -ne $($WAUPolicies.WAU_DesktopShortcut) -and ($($WAUPolicies.WAU_DesktopShortcut) -ne $($WAUConfig.WAU_DesktopShortcut))) 
         {
            $null = (New-ItemProperty -Path $regPath -Name WAU_DesktopShortcut -Value $($WAUPolicies.WAU_DesktopShortcut) -PropertyType DWord -Force -Confirm:$false)

            if ($WAUPolicies.WAU_DesktopShortcut -eq 1) 
            {
               Add-Shortcut 'wscript.exe' "${env:Public}\Desktop\WAU - Check for updated Apps.lnk" "`"$($WAUConfig.InstallLocation)\Invisible.vbs`" `"powershell.exe -NoProfile -ExecutionPolicy Bypass -File `"`"`"$($WAUConfig.InstallLocation)\user-run.ps1`"`"" "${env:SystemRoot}\System32\shell32.dll,-16739" 'Manual start of Winget-AutoUpdate (WAU)...'
            }
            else 
            {
               $null = (Remove-Item -Path "${env:Public}\Desktop\WAU - Check for updated Apps.lnk" -Force -Confirm:$false)
            }
            $ChangedSettings++
         }
         elseif ($null -eq $($WAUPolicies.WAU_DesktopShortcut) -and ($($WAUConfig.WAU_DesktopShortcut) -or $($WAUConfig.WAU_DesktopShortcut) -eq 0)) 
         {
            $null = (Remove-ItemProperty -Path $regPath -Name WAU_DesktopShortcut -Force -Confirm:$false -ErrorAction SilentlyContinue)
            $null = (Remove-Item -Path "${env:Public}\Desktop\WAU - Check for updated Apps.lnk" -Force -Confirm:$false)
            $ChangedSettings++
         }

         if ($null -ne $($WAUPolicies.WAU_StartMenuShortcut) -and ($($WAUPolicies.WAU_StartMenuShortcut) -ne $($WAUConfig.WAU_StartMenuShortcut))) 
         {
            $null = (New-ItemProperty -Path $regPath -Name WAU_StartMenuShortcut -Value $($WAUPolicies.WAU_StartMenuShortcut) -PropertyType DWord -Force -Confirm:$false)

            if ($WAUPolicies.WAU_StartMenuShortcut -eq 1) 
            {
               if (!(Test-Path -Path "${env:ProgramData}\Microsoft\Windows\Start Menu\Programs\Winget-AutoUpdate (WAU)")) 
               {
                  $null = (New-Item -ItemType Directory -Force -Path "${env:ProgramData}\Microsoft\Windows\Start Menu\Programs\Winget-AutoUpdate (WAU)" -Confirm:$false)
               }

               Add-Shortcut 'wscript.exe' "${env:ProgramData}\Microsoft\Windows\Start Menu\Programs\Winget-AutoUpdate (WAU)\WAU - Check for updated Apps.lnk" "`"$($WAUConfig.InstallLocation)\Invisible.vbs`" `"powershell.exe -NoProfile -ExecutionPolicy Bypass -File `"`"`"$($WAUConfig.InstallLocation)\user-run.ps1`"`"" "${env:SystemRoot}\System32\shell32.dll,-16739" 'Manual start of Winget-AutoUpdate (WAU)...'
               Add-Shortcut 'wscript.exe' "${env:ProgramData}\Microsoft\Windows\Start Menu\Programs\Winget-AutoUpdate (WAU)\WAU - Open logs.lnk" "`"$($WAUConfig.InstallLocation)\Invisible.vbs`" `"powershell.exe -NoProfile -ExecutionPolicy Bypass -File `"`"`"$($WAUConfig.InstallLocation)\user-run.ps1`" -Logs`"" "${env:SystemRoot}\System32\shell32.dll,-16763" 'Open existing WAU logs...'
               Add-Shortcut 'wscript.exe' "${env:ProgramData}\Microsoft\Windows\Start Menu\Programs\Winget-AutoUpdate (WAU)\WAU - Web Help.lnk" "`"$($WAUConfig.InstallLocation)\Invisible.vbs`" `"powershell.exe -NoProfile -ExecutionPolicy Bypass -File `"`"`"$($WAUConfig.InstallLocation)\user-run.ps1`" -Help`"" "${env:SystemRoot}\System32\shell32.dll,-24" 'Help for WAU...'
            }
            else 
            {
               $null = (Remove-Item -Path "${env:ProgramData}\Microsoft\Windows\Start Menu\Programs\Winget-AutoUpdate (WAU)" -Recurse -Force -Confirm:$false)
            }
            $ChangedSettings++
         }
         elseif ($null -eq $($WAUPolicies.WAU_StartMenuShortcut) -and ($($WAUConfig.WAU_StartMenuShortcut) -or $($WAUConfig.WAU_StartMenuShortcut) -eq 0)) 
         {
            $null = (Remove-ItemProperty -Path $regPath -Name WAU_StartMenuShortcut -Force -ErrorAction SilentlyContinue -Confirm:$false)
            $null = (Remove-Item -Path "${env:ProgramData}\Microsoft\Windows\Start Menu\Programs\Winget-AutoUpdate (WAU)" -Recurse -Force -Confirm:$false)
            $ChangedSettings++
         }

         if ($null -ne $($WAUPolicies.WAU_MaxLogFiles) -and ($($WAUPolicies.WAU_MaxLogFiles) -ne $($WAUConfig.WAU_MaxLogFiles))) 
         {
            $null = (New-ItemProperty -Path $regPath -Name WAU_MaxLogFiles -Value $($WAUPolicies.WAU_MaxLogFiles.TrimEnd(' ', '\', '/')) -Force -Confirm:$false)
            $ChangedSettings++
         }
         elseif ($null -eq $($WAUPolicies.WAU_MaxLogFiles) -and $($WAUConfig.WAU_MaxLogFiles) -ne 3) 
         {
            $null = (New-ItemProperty -Path $regPath -Name WAU_MaxLogFiles -Value 3 -Force -Confirm:$false)
            $ChangedSettings++
         }

         if ($null -ne $($WAUPolicies.WAU_MaxLogSize) -and ($($WAUPolicies.WAU_MaxLogSize) -ne $($WAUConfig.WAU_MaxLogSize))) 
         {
            $null = (New-ItemProperty -Path $regPath -Name WAU_MaxLogSize -Value $($WAUPolicies.WAU_MaxLogSize.TrimEnd(' ', '\', '/')) -Force -Confirm:$false)
            $ChangedSettings++
         }
         elseif ($null -eq $($WAUPolicies.WAU_MaxLogSize) -and $($WAUConfig.WAU_MaxLogSize) -ne 1048576) 
         {
            $null = (New-ItemProperty -Path $regPath -Name WAU_MaxLogSize -Value 1048576 -Force -Confirm:$false)
            $ChangedSettings++
         }

         # Get WAU Configurations after Policies change
         $Script:WAUConfig = (Get-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Winget-AutoUpdate')
      }
   }

   Return $($WAUPolicies.WAU_ActivateGPOManagement), $ChangedSettings
}