Get-IvantiWCPolicy

Reads, decodes, and correlates Ivanti Workspace Control policy sets from a Building Block XML file.

Syntax 

Get-IvantiWCPolicy
    -Path <String>
    [-IncludeADMFiles]
    [-ExportFor <String>]
    [-IncludePolicyDescription]
    [<CommonParameters>]

Get-IvantiWCPolicy
    -Path <String>
    [-IncludeADMFiles]
    [-ExportFor <String>]
    [-IncludePolicyDescription]
    -SaveResourceFiles
    -ExportPath <String>
    [<CommonParameters>]

Description

The Get-IvantiWCPolicy function reads an Ivanti Workspace Control Building Block XML file, pre-loads all embedded ADMX/ADML templates, and processes each policy set found within the file. For each policy set it correlates the applied registry settings with their ADMX definitions (via Get-AdmxPolicySetting) and returns a structured PowerShell object per policy set.

Supports two export modes via -ExportFor:

  • WEM: returns correlated policy data only (default)
  • AppVentiX: additionally returns an AppVentiXParams property containing pre-structured policy data ready to pass directly to New-AppVentiXGroupPolicyUserSetting -PolicyInputObject

Policy state (Enabled/Disabled/Unconfigured) is determined in priority order:

  1. POLICY:1/2 indicator from the embedded PolicySettings data
  2. Policy-level registry value compared against ADMX enabledValue/disabledValue
  3. Presence of element-level registry values (implies Enabled)

List-type ADMX elements and Boolean elements with explicit trueValue/falseValue nodes are fully supported.

Parameters

-Path

Path to the Ivanti Workspace Control Building Block XML file.

   
Type: String
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

-IncludeADMFiles

When specified, includes the ADMX and ADML filenames and their base64-encoded content in the output for each policy set. Required when piping output to New-AppVentiXGroupPolicyUserSetting.

   
Type: SwitchParameter
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

-ExportFor

Target export format. ‘AppVentiX’ adds the AppVentiXParams property to each output object. Defaults to ‘WEM’.

   
Type: String
Position: Named
Default value: WEM
Accept pipeline input: False
Accept wildcard characters: False

-IncludePolicyDescription

When specified, includes the ADMX ExplainText (policy description) in the PolicySettings output.

   
Type: SwitchParameter
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

-SaveResourceFiles

When specified, saves the decoded ADMX/ADML files and the raw PolicySettings/RegistryFile data to disk at the path specified by -ExportPath.

   
Type: SwitchParameter
Position: Named
Default value: False
Accept pipeline input: False
Accept wildcard characters: False

-ExportPath

Directory path where decoded resource files are saved when -SaveResourceFiles is used.

   
Type: String
Position: Named
Default value: None
Accept pipeline input: False
Accept wildcard characters: False

Examples

Example 1: Export policy data for use with AppVentiX 

$Policies = Get-IvantiWCPolicy -Path 'C:\temp\IvantiBB.xml' -IncludeADMFiles -ExportFor AppVentiX
$result = $Policies | ForEach-Object {
    New-AppVentiXGroupPolicyUserSetting `
        -FriendlyName       $_.Name `
        -AdmxContent        $_.ADMXContent `
        -AdmxFileName       $_.ADMX `
        -AdmlContent        $_.ADMLContent `
        -AdmlFileName       $_.ADML `
        -PolicyInputObject  $_.AppVentiXParams
}

Reads policy data from an Ivanti Building Block and creates corresponding AppVentiX Group Policy user settings.

Example 2: Inspect correlated policy data as JSON 

Get-IvantiWCPolicy -Path 'C:\temp\IvantiBB.xml' | ConvertTo-Json -Depth 5

Inspects the correlated policy data in JSON format.

Example 3: Save decoded resource files for inspection 

Get-IvantiWCPolicy -Path 'C:\temp\IvantiBB.xml' -SaveResourceFiles -ExportPath 'C:\temp\TempPolicy'

Saves the decoded ADMX/ADML and registry files to disk for manual inspection.

Notes

  • The Building Block XML must contain embedded ADMX/ADML templates for policy correlation to work
  • Use -IncludeADMFiles when the output will be used with New-AppVentiXGroupPolicyUserSetting or Import-IvantiWCPolicy