Windows Monitor - Device Standards Script

<#
This resource is provided as a convenience for Level users. We cannot 
guarantee it will work in all environments. Please test before deploying 
to your production environment. We welcome contributions to our community 
library.

Level Library
https://level.io/library/script-windows-monitor-device-standards
#>

# ==========================
# Define minimum standards
# ==========================
$minCores = {{cf_minimum_cpu}}
$minRAM = {{cf_minimum_ram}}              # in GB
$minDiskSpace = {{cf_minimum_storage}}    # in GB

# ==========================
# Standards Bypass Check
# ==========================
$standardsBypass = "{{cf_standards_bypass}}"
$standardsBypass = if ($standardsBypass.ToString().ToLower() -match "^(1|true)$") { $true } else { $false }

if ($standardsBypass) {
    Write-Host "Standards check bypassed by configuration"
    exit 0
}

# ==========================
# System Checks
# ==========================

# CPU Cores
$cpuCores = (Get-CimInstance Win32_Processor | Measure-Object -Property NumberOfLogicalProcessors -Sum).Sum

# RAM
$totalMemoryBytes = (Get-CimInstance Win32_ComputerSystem).TotalPhysicalMemory
$totalMemoryGB = [math]::Round($totalMemoryBytes / 1GB, 2)

# Disk Space (local disks only)
$drives = Get-WmiObject Win32_LogicalDisk | Where-Object { $_.DriveType -eq 3 }
$totalDiskSpaceGB = 0
foreach ($drive in $drives) {
    $totalDiskSpaceGB += [math]::Round($drive.Size / 1GB, 2)
}

# ==========================
# Evaluate Standards
# ==========================
$issues = @()

# CPU
if ($cpuCores -lt $minCores) {
    $issues += "ALERT: CPU has $cpuCores cores, below the minimum requirement of $minCores cores."
}

# RAM
if ($totalMemoryGB -lt $minRAM) {
    $issues += "ALERT: System has $totalMemoryGB GB RAM, below the minimum requirement of $minRAM GB."
}

# Disk Space
if ($totalDiskSpaceGB -lt $minDiskSpace) {
    $issues += "ALERT: Total disk space is $totalDiskSpaceGB GB, below the minimum requirement of $minDiskSpace GB."
}

# Disk Type
$DiskType = (Get-PhysicalDisk | Where-Object { $_.DeviceID -eq "0" } | Select-Object -ExpandProperty MediaType -ErrorAction SilentlyContinue)
if ($null -eq $DiskType) {
    $issues += "WARNING: Unable to determine disk type (no data returned)."
} elseif ($DiskType -notlike "SSD") {
    $issues += "ALERT: The primary disk is not an SSD, but is a $DiskType."
}

# ==========================
# Output
# ==========================
if ($issues.Count -gt 0) {
    Write-Host ($issues -join "`n")
    exit 1
} else {
    Write-Host ("System check passed`n" +
                "- CPU cores: $cpuCores (min: $minCores)`n" +
                "- RAM: $totalMemoryGB GB (min: $minRAM GB)`n" +
                "- Disk space: $totalDiskSpaceGB GB (min: $minDiskSpace GB)")
    exit 0
}