resources
| where type == 'microsoft.hybridcompute/machines'
| extend agentVersion = tostring(properties.agentVersion) , operatingSystem = tostring(properties.osSku)
| where agentVersion !startswith  '1.34.'
| project name,resourceGroup,operatingSystem,agentVersion

try {
    # Add the service principal application ID and secret here
    $servicePrincipalClientId = "<App Id HERE>";
    $servicePrincipalSecret = "<App SECRET HERE>";

    $env:SUBSCRIPTION_ID = "<Subscription Id>";
    $env:RESOURCE_GROUP = "<Resource group name>";
    $env:TENANT_ID = "<Tenant Id>";
    $env:LOCATION = "<Azure region>";

    $uncPath = "\\<server hosting the agent>\<shared folder name>\AzureConnectedMachineAgent.msi"
    $localPath = "C:\Temp\AzureConnectedMachineAgent.msi"
    $agentPath = "C:\Program Files\AzureConnectedMachineAgent"
    $targetVersion = "1.34.02440.1261"

    if (test-path -Path $agentPath) {
        Write-host "Agent is already installed....Checking the agent version"
        $agentVersion = (azcmagent show agentVersion -j | ConvertFrom-Json).agentVersion
        # Split the version string into an array of its components
        $versionComponents = $agentVersion -split '\.'
        # Split the target version into an array of its components
        $targetComponents = $targetVersion -split '\.'
        # Compare each component of the versions
        for ($i = 0; $i -lt $versionComponents.Length; $i++) {
            $versionComponent = [int]$versionComponents[$i]
            $targetComponent = [int]$targetComponents[$i]
            if ($versionComponent -lt $targetComponent) {
                Write-Host "The version '$agentVersion' is less than '$targetVersion'."
                Write-Host "Upgrading the agent"
                New-Item -Path c:\temp -ItemType Directory -Force | Out-Null
                Copy-Item -Path $uncPath -Destination $localPath -Force
                Start-Process -FilePath msiexec.exe -ArgumentList "/i `"$localPath`" /qn" -Wait
                Remove-Item -Path $localPath -Force
                break
            }
            elseif ($versionComponent -gt $targetComponent) {
                Write-Host "The version '$agentVersion' is greater than '$targetVersion'."
                break
            }
        }
        # If all components are equal or the loop completes without a break, the versions are equal
        if ($i -eq $versionComponents.Length) {
            Write-Host "The version '$agentVersion' is equal to '$targetVersion'."
        }
    }
    else {
        Write-Host "Installing the agent"
        New-Item -Path c:\temp -ItemType Directory -Force | Out-Null
        Copy-Item -Path $uncPath -Destination $localPath -Force
        Start-Process -FilePath msiexec.exe -ArgumentList "/i `"$localPath`" /qn" -Wait
        Remove-Item -Path $localPath -Force

        # Run connect command
        & "$env:ProgramW6432\AzureConnectedMachineAgent\azcmagent.exe" connect --service-principal-id "$servicePrincipalClientId" --service-principal-secret "$servicePrincipalSecret" --resource-group "$env:RESOURCE_GROUP" --tenant-id "$env:TENANT_ID" --location "$env:LOCATION" --subscription-id "$env:SUBSCRIPTION_ID";
    }
}
catch {
    $logBody = @{subscriptionId = "$env:SUBSCRIPTION_ID"; resourceGroup = "$env:RESOURCE_GROUP"; tenantId = "$env:TENANT_ID"; location = "$env:LOCATION"; operation = "onboarding"; messageType = $_.FullyQualifiedErrorId; message = "$_"; };
    Invoke-WebRequest -UseBasicParsing -Uri "https://gbl.his.arc.azure.com/log" -Method "PUT" -Body ($logBody | ConvertTo-Json) | out-null;
    Write-Host  -ForegroundColor red $_.Exception;
}

resources
| where type == 'microsoft.hybridcompute/machines'
| extend agentVersion = tostring(properties.agentVersion) , operatingSystem = tostring(properties.osSku)
| extend status = tostring(properties.status)
| extend lastConnected = todatetime(properties.lastStatusChange)
| extend cores = properties.detectedProperties.coreCount
| where operatingSystem contains "2012"
| project name,operatingSystem,cores,status,lastConnected,agentVersion

$location = "<Region where the ESU license is deployed>"
$subscriptionId = "<SubscriptionId for Arc-enabled servers>"
$esuSubscriptionId = "<SubscriptionId for Arc-enabled servers>"
$esuLicenceResourceGroup = "<Resource group where the ESU license is deployed>"
$licenseName = "<Name of the ESU license>"
$arcServersResourceGroup = "<Resource group where the Arc-enabled machines are deployed>"

################################################################
# Uncomment the method you will use to provide the servers list
## 1. Import using CSV
## 2. Manually create an array of servers
## 3. Directly query the Arc-enabled machines
################################################################


###############################################################################
##1. Importing servers list using a CSV file (Column name should be ServerName)
###############################################################################
<#
$serversListFile = "<Path to the CSV file containing the list of servers>"
$servers = Import-Csv $serversListFile -Header "ServerName"
#>

################################################################
## 2. Manually create an array of servers
################################################################
<#
$servers = @(
    "server1",
    "server2"
)
#>

################################################################
## 3. Directly query the Arc-enabled machines
################################################################
<#
Install-Module -Name Az.ConnectedMachine -Force
$servers = Get-AzConnectedMachine -ResourceGroupName $arcServersResourceGroup -SubscriptionId $subscriptionId | Select-Object -ExpandProperty Name
#>

Connect-AzAccount
$licenseId = "/subscriptions/$esuSubscriptionId/resourceGroups/$esuLicenceResourceGroup/providers/Microsoft.HybridCompute/licenses/$licenseName"
$accessToken = (Get-AzAccessToken).Token
$headers = @{
    "Authorization" = "Bearer $accessToken"
    "Content-Type" = "application/json"
}

foreach($server in $servers){
    $Url = "https://management.azure.com/subscriptions/$subscriptionId/resourceGroups/$arcServersResourceGroup/providers/Microsoft.HybridCompute/machines/$server/licenseProfiles/default?api-version=2023-06-20-preview "
    $body = @{
        location = $location
        properties = @{
            esuProfile = @{
                assignedLicense = $licenseId
            }
        }
    } | ConvertTo-Json

    Invoke-RestMethod -Method Put -Uri $url -Body $body -Headers $headers
}