#MAK & ESU remediation v3

$OS = (Get-WmiObject Win32_OperatingSystem).Caption
Write-Verbose $OS

$Esu1Key = '4RPR3-NRF26-9CTKB-7GRXQ-GF72Q'
$Esu2Key = $null
$Esu3Key = $null

# activation IDs found here
# https://techcommunity.microsoft.com/t5/windows-it-pro-blog/windows-server-2012-r2-extended-security-updates/ba-p/3976610
$Esu1Id = 'c0a2ea62-12ad-435b-ab4f-c9bfab48dbc4'
$Esu2Id = 'e3e2690b-931c-4c80-b1ff-dffba8a81988'
$Esu3Id = '55b1dd2d-2209-4ea0-a805-06298bad25b3'


If ($Esu1Key) {
    Write-Verbose -Message "Esu1Key found, activating"
    cscript C:\Windows\System32\slmgr.vbs -ipk $Esu1Key
    cscript C:\Windows\System32\slmgr.vbs -ato $Esu1Id
}
If ($Esu2Key) {
    Write-Verbose -Message "Esu2Key found, activating"
    cscript C:\Windows\System32\slmgr.vbs -ipk $Esu2Key
    cscript C:\Windows\System32\slmgr.vbs -ato $Esu2Id
}
If ($Esu3Key) {
    Write-Verbose -Message "Esu3Key found, activating"
    cscript C:\Windows\System32\slmgr.vbs -ipk $Esu3Key
    cscript C:\Windows\System32\slmgr.vbs -ato $Esu3Id
}