mirror of
https://github.com/builtbybel/BloatyNosy.git
synced 2024-11-25 17:33:17 +01:00
Add files via upload
This commit is contained in:
Belim
GitHub
parent
9142f81040
commit
c7ea2646c9
311
extensions/AutoLogonHandler.ps1
Normal file
311
extensions/AutoLogonHandler.ps1
Normal file
@ -0,0 +1,311 @@
|
||||
[cmdletbinding()]
|
||||
param (
|
||||
[Parameter(Mandatory=$true)] [ValidateNotNullOrEmpty()] [string]
|
||||
$Username,
|
||||
|
||||
[Parameter(Mandatory=$true)] [ValidateNotNullOrEmpty()] [System.Security.SecureString]
|
||||
$Password,
|
||||
|
||||
[string]
|
||||
$Domain,
|
||||
|
||||
[Int]
|
||||
$AutoLogonCount,
|
||||
|
||||
[switch]
|
||||
$RemoveLegalPrompt,
|
||||
|
||||
[System.IO.FileInfo]
|
||||
$BackupFile
|
||||
)
|
||||
|
||||
begin {
|
||||
|
||||
[string] $WinlogonPath = "HKLM:\Software\Microsoft\Windows NT\CurrentVersion\Winlogon"
|
||||
[string] $WinlogonBannerPolicyPath = "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System"
|
||||
|
||||
[string] $Enable = 1
|
||||
[string] $Disable = 0
|
||||
|
||||
#region C# Code to P-invoke LSA LsaStorePrivateData function.
|
||||
Add-Type @"
|
||||
using System;
|
||||
using System.Collections.Generic;
|
||||
using System.Text;
|
||||
using System.Runtime.InteropServices;
|
||||
|
||||
namespace ComputerSystem
|
||||
{
|
||||
public class LSAutil
|
||||
{
|
||||
[StructLayout(LayoutKind.Sequential)]
|
||||
private struct LSA_UNICODE_STRING
|
||||
{
|
||||
public UInt16 Length;
|
||||
public UInt16 MaximumLength;
|
||||
public IntPtr Buffer;
|
||||
}
|
||||
|
||||
[StructLayout(LayoutKind.Sequential)]
|
||||
private struct LSA_OBJECT_ATTRIBUTES
|
||||
{
|
||||
public int Length;
|
||||
public IntPtr RootDirectory;
|
||||
public LSA_UNICODE_STRING ObjectName;
|
||||
public uint Attributes;
|
||||
public IntPtr SecurityDescriptor;
|
||||
public IntPtr SecurityQualityOfService;
|
||||
}
|
||||
|
||||
private enum LSA_AccessPolicy : long
|
||||
{
|
||||
POLICY_VIEW_LOCAL_INFORMATION = 0x00000001L,
|
||||
POLICY_VIEW_AUDIT_INFORMATION = 0x00000002L,
|
||||
POLICY_GET_PRIVATE_INFORMATION = 0x00000004L,
|
||||
POLICY_TRUST_ADMIN = 0x00000008L,
|
||||
POLICY_CREATE_ACCOUNT = 0x00000010L,
|
||||
POLICY_CREATE_SECRET = 0x00000020L,
|
||||
POLICY_CREATE_PRIVILEGE = 0x00000040L,
|
||||
POLICY_SET_DEFAULT_QUOTA_LIMITS = 0x00000080L,
|
||||
POLICY_SET_AUDIT_REQUIREMENTS = 0x00000100L,
|
||||
POLICY_AUDIT_LOG_ADMIN = 0x00000200L,
|
||||
POLICY_SERVER_ADMIN = 0x00000400L,
|
||||
POLICY_LOOKUP_NAMES = 0x00000800L,
|
||||
POLICY_NOTIFICATION = 0x00001000L
|
||||
}
|
||||
|
||||
[DllImport("advapi32.dll", SetLastError = true, PreserveSig = true)]
|
||||
private static extern uint LsaRetrievePrivateData(
|
||||
IntPtr PolicyHandle,
|
||||
ref LSA_UNICODE_STRING KeyName,
|
||||
out IntPtr PrivateData
|
||||
);
|
||||
|
||||
[DllImport("advapi32.dll", SetLastError = true, PreserveSig = true)]
|
||||
private static extern uint LsaStorePrivateData(
|
||||
IntPtr policyHandle,
|
||||
ref LSA_UNICODE_STRING KeyName,
|
||||
ref LSA_UNICODE_STRING PrivateData
|
||||
);
|
||||
|
||||
[DllImport("advapi32.dll", SetLastError = true, PreserveSig = true)]
|
||||
private static extern uint LsaOpenPolicy(
|
||||
ref LSA_UNICODE_STRING SystemName,
|
||||
ref LSA_OBJECT_ATTRIBUTES ObjectAttributes,
|
||||
uint DesiredAccess,
|
||||
out IntPtr PolicyHandle
|
||||
);
|
||||
|
||||
[DllImport("advapi32.dll", SetLastError = true, PreserveSig = true)]
|
||||
private static extern uint LsaNtStatusToWinError(
|
||||
uint status
|
||||
);
|
||||
|
||||
[DllImport("advapi32.dll", SetLastError = true, PreserveSig = true)]
|
||||
private static extern uint LsaClose(
|
||||
IntPtr policyHandle
|
||||
);
|
||||
|
||||
[DllImport("advapi32.dll", SetLastError = true, PreserveSig = true)]
|
||||
private static extern uint LsaFreeMemory(
|
||||
IntPtr buffer
|
||||
);
|
||||
|
||||
private LSA_OBJECT_ATTRIBUTES objectAttributes;
|
||||
private LSA_UNICODE_STRING localsystem;
|
||||
private LSA_UNICODE_STRING secretName;
|
||||
|
||||
public LSAutil(string key)
|
||||
{
|
||||
if (key.Length == 0)
|
||||
{
|
||||
throw new Exception("Key lenght zero");
|
||||
}
|
||||
|
||||
objectAttributes = new LSA_OBJECT_ATTRIBUTES();
|
||||
objectAttributes.Length = 0;
|
||||
objectAttributes.RootDirectory = IntPtr.Zero;
|
||||
objectAttributes.Attributes = 0;
|
||||
objectAttributes.SecurityDescriptor = IntPtr.Zero;
|
||||
objectAttributes.SecurityQualityOfService = IntPtr.Zero;
|
||||
|
||||
localsystem = new LSA_UNICODE_STRING();
|
||||
localsystem.Buffer = IntPtr.Zero;
|
||||
localsystem.Length = 0;
|
||||
localsystem.MaximumLength = 0;
|
||||
|
||||
secretName = new LSA_UNICODE_STRING();
|
||||
secretName.Buffer = Marshal.StringToHGlobalUni(key);
|
||||
secretName.Length = (UInt16)(key.Length * UnicodeEncoding.CharSize);
|
||||
secretName.MaximumLength = (UInt16)((key.Length + 1) * UnicodeEncoding.CharSize);
|
||||
}
|
||||
|
||||
private IntPtr GetLsaPolicy(LSA_AccessPolicy access)
|
||||
{
|
||||
IntPtr LsaPolicyHandle;
|
||||
|
||||
uint ntsResult = LsaOpenPolicy(ref this.localsystem, ref this.objectAttributes, (uint)access, out LsaPolicyHandle);
|
||||
|
||||
uint winErrorCode = LsaNtStatusToWinError(ntsResult);
|
||||
if (winErrorCode != 0)
|
||||
{
|
||||
throw new Exception("LsaOpenPolicy failed: " + winErrorCode);
|
||||
}
|
||||
|
||||
return LsaPolicyHandle;
|
||||
}
|
||||
|
||||
private static void ReleaseLsaPolicy(IntPtr LsaPolicyHandle)
|
||||
{
|
||||
uint ntsResult = LsaClose(LsaPolicyHandle);
|
||||
uint winErrorCode = LsaNtStatusToWinError(ntsResult);
|
||||
if (winErrorCode != 0)
|
||||
{
|
||||
throw new Exception("LsaClose failed: " + winErrorCode);
|
||||
}
|
||||
}
|
||||
|
||||
public void SetSecret(string value)
|
||||
{
|
||||
LSA_UNICODE_STRING lusSecretData = new LSA_UNICODE_STRING();
|
||||
|
||||
if (value.Length > 0)
|
||||
{
|
||||
//Create data and key
|
||||
lusSecretData.Buffer = Marshal.StringToHGlobalUni(value);
|
||||
lusSecretData.Length = (UInt16)(value.Length * UnicodeEncoding.CharSize);
|
||||
lusSecretData.MaximumLength = (UInt16)((value.Length + 1) * UnicodeEncoding.CharSize);
|
||||
}
|
||||
else
|
||||
{
|
||||
//Delete data and key
|
||||
lusSecretData.Buffer = IntPtr.Zero;
|
||||
lusSecretData.Length = 0;
|
||||
lusSecretData.MaximumLength = 0;
|
||||
}
|
||||
|
||||
IntPtr LsaPolicyHandle = GetLsaPolicy(LSA_AccessPolicy.POLICY_CREATE_SECRET);
|
||||
uint result = LsaStorePrivateData(LsaPolicyHandle, ref secretName, ref lusSecretData);
|
||||
ReleaseLsaPolicy(LsaPolicyHandle);
|
||||
|
||||
uint winErrorCode = LsaNtStatusToWinError(result);
|
||||
if (winErrorCode != 0)
|
||||
{
|
||||
throw new Exception("StorePrivateData failed: " + winErrorCode);
|
||||
}
|
||||
}
|
||||
}
|
||||
}
|
||||
"@
|
||||
#endregion
|
||||
}
|
||||
|
||||
process {
|
||||
|
||||
try {
|
||||
$ErrorActionPreference = "Stop"
|
||||
|
||||
$decryptedPass = [Runtime.InteropServices.Marshal]::PtrToStringAuto(
|
||||
[Runtime.InteropServices.Marshal]::SecureStringToBSTR($Password)
|
||||
)
|
||||
|
||||
if ($BackupFile) {
|
||||
# Initialize the hash table with a string comparer to allow case sensitive keys.
|
||||
# This allows differentiation between the winlogon and system policy logon banner strings.
|
||||
$OrigionalSettings = New-Object System.Collections.Hashtable ([system.stringcomparer]::CurrentCulture)
|
||||
|
||||
$OrigionalSettings.AutoAdminLogon = (Get-ItemProperty $WinlogonPath ).AutoAdminLogon
|
||||
$OrigionalSettings.ForceAutoLogon = (Get-ItemProperty $WinlogonPath).ForceAutoLogon
|
||||
$OrigionalSettings.DefaultUserName = (Get-ItemProperty $WinlogonPath).DefaultUserName
|
||||
$OrigionalSettings.DefaultDomainName = (Get-ItemProperty $WinlogonPath).DefaultDomainName
|
||||
$OrigionalSettings.DefaultPassword = (Get-ItemProperty $WinlogonPath).DefaultPassword
|
||||
$OrigionalSettings.AutoLogonCount = (Get-ItemProperty $WinlogonPath).AutoLogonCount
|
||||
|
||||
# The winlogon logon banner settings.
|
||||
$OrigionalSettings.LegalNoticeCaption = (Get-ItemProperty $WinlogonPath).LegalNoticeCaption
|
||||
$OrigionalSettings.LegalNoticeText = (Get-ItemProperty $WinlogonPath).LegalNoticeText
|
||||
|
||||
# The system policy logon banner settings.
|
||||
$OrigionalSettings.legalnoticecaption = (Get-ItemProperty $WinlogonBannerPolicyPath).legalnoticecaption
|
||||
$OrigionalSettings.legalnoticetext = (Get-ItemProperty $WinlogonBannerPolicyPath).legalnoticetext
|
||||
|
||||
$OrigionalSettings | Export-Clixml -Depth 10 -Path $BackupFile
|
||||
}
|
||||
|
||||
# Store the password securely.
|
||||
$lsaUtil = New-Object ComputerSystem.LSAutil -ArgumentList "DefaultPassword"
|
||||
$lsaUtil.SetSecret($decryptedPass)
|
||||
|
||||
# Store the autologon registry settings.
|
||||
Set-ItemProperty -Path $WinlogonPath -Name AutoAdminLogon -Value $Enable -Force
|
||||
|
||||
Set-ItemProperty -Path $WinlogonPath -Name DefaultUserName -Value $Username -Force
|
||||
Set-ItemProperty -Path $WinlogonPath -Name DefaultDomainName -Value $Domain -Force
|
||||
|
||||
if ($AutoLogonCount) {
|
||||
Set-ItemProperty -Path $WinlogonPath -Name AutoLogonCount -Value $AutoLogonCount -Force
|
||||
} else {
|
||||
Remove-ItemProperty -Path $WinlogonPath -Name AutoLogonCount -ErrorAction SilentlyContinue
|
||||
}
|
||||
|
||||
if ($RemoveLegalPrompt) {
|
||||
Set-ItemProperty -Path $WinlogonPath -Name LegalNoticeCaption -Value $null -Force
|
||||
Set-ItemProperty -Path $WinlogonPath -Name LegalNoticeText -Value $null -Force
|
||||
|
||||
Set-ItemProperty -Path $WinlogonBannerPolicyPath -Name legalnoticecaption -Value $null -Force
|
||||
Set-ItemProperty -Path $WinlogonBannerPolicyPath -Name legalnoticetext -Value $null -Force
|
||||
}
|
||||
} catch {
|
||||
throw 'Failed to set auto logon. The error was: "{0}".' -f $_
|
||||
}
|
||||
|
||||
}
|
||||
|
||||
<#
|
||||
.SYNOPSIS
|
||||
Enables auto logon using the specified username and password.
|
||||
|
||||
.PARAMETER Username
|
||||
The username of the user to automatically logon as.
|
||||
|
||||
.PARAMETER Password
|
||||
The password for the user to automatically logon as.
|
||||
|
||||
.PARAMETER Domain
|
||||
The domain of the user to automatically logon as.
|
||||
|
||||
.PARAMETER AutoLogonCount
|
||||
The number of logons that auto logon will be enabled.
|
||||
|
||||
.PARAMETER RemoveLegalPrompt
|
||||
Removes the system banner to ensure interventionless logon.
|
||||
|
||||
.PARAMETER BackupFile
|
||||
If specified the existing settings such as the system banner text will be backed up to the specified file.
|
||||
|
||||
.EXAMPLE
|
||||
PS C:\> Set-SecureAutoLogon `
|
||||
-Username $env:USERNAME `
|
||||
-Password (Read-Host -AsSecureString) `
|
||||
-AutoLogonCount 2 `
|
||||
-RemoveLegalPrompt `
|
||||
-BackupFile "C:\WinlogonBackup.xml"
|
||||
|
||||
.INPUTS
|
||||
None.
|
||||
|
||||
.OUTPUTS
|
||||
None.
|
||||
|
||||
.NOTES
|
||||
Revision History:
|
||||
2011-04-19 : Andy Arismendi - Created.
|
||||
2011-09-29 : Andy Arismendi - Changed to use LSA secrets to store password securely.
|
||||
|
||||
.LINK
|
||||
http://support.microsoft.com/kb/324737
|
||||
|
||||
.LINK
|
||||
http://msdn.microsoft.com/en-us/library/aa378750
|
||||
|
||||
#>
|
||||
1
extensions/ChrisTitusAppHandler.ps1
Normal file
1
extensions/ChrisTitusAppHandler.ps1
Normal file
@ -0,0 +1 @@
|
||||
irm christitus.com/win | iex
|
||||
2
extensions/ClearEventLogsHandler.ps1
Normal file
2
extensions/ClearEventLogsHandler.ps1
Normal file
@ -0,0 +1,2 @@
|
||||
Import-Module Microsoft.PowerShell.Management
|
||||
Get-EventLog -LogName * | ForEach { Clear-EventLog $_.Log }
|
||||
60
extensions/OneDriveHandler.ps1
Normal file
60
extensions/OneDriveHandler.ps1
Normal file
@ -0,0 +1,60 @@
|
||||
Import-Module -DisableNameChecking $PSScriptRoot\..\lib\force-mkdir.psm1
|
||||
Import-Module -DisableNameChecking $PSScriptRoot\..\lib\take-own.psm1
|
||||
|
||||
Write-Output "Kill OneDrive process"
|
||||
taskkill.exe /F /IM "OneDrive.exe"
|
||||
taskkill.exe /F /IM "explorer.exe"
|
||||
|
||||
Write-Output "Remove OneDrive"
|
||||
if (Test-Path "$env:systemroot\System32\OneDriveSetup.exe") {
|
||||
& "$env:systemroot\System32\OneDriveSetup.exe" /uninstall
|
||||
}
|
||||
if (Test-Path "$env:systemroot\SysWOW64\OneDriveSetup.exe") {
|
||||
& "$env:systemroot\SysWOW64\OneDriveSetup.exe" /uninstall
|
||||
}
|
||||
|
||||
Write-Output "Removing OneDrive leftovers"
|
||||
Remove-Item -Recurse -Force -ErrorAction SilentlyContinue "$env:localappdata\Microsoft\OneDrive"
|
||||
Remove-Item -Recurse -Force -ErrorAction SilentlyContinue "$env:programdata\Microsoft OneDrive"
|
||||
Remove-Item -Recurse -Force -ErrorAction SilentlyContinue "$env:systemdrive\OneDriveTemp"
|
||||
# check if directory is empty before removing:
|
||||
If ((Get-ChildItem "$env:userprofile\OneDrive" -Recurse | Measure-Object).Count -eq 0) {
|
||||
Remove-Item -Recurse -Force -ErrorAction SilentlyContinue "$env:userprofile\OneDrive"
|
||||
}
|
||||
|
||||
Write-Output "Disable OneDrive via Group Policies"
|
||||
force-mkdir "HKLM:\SOFTWARE\Wow6432Node\Policies\Microsoft\Windows\OneDrive"
|
||||
Set-ItemProperty "HKLM:\SOFTWARE\Wow6432Node\Policies\Microsoft\Windows\OneDrive" "DisableFileSyncNGSC" 1
|
||||
|
||||
Write-Output "Remove Onedrive from explorer sidebar"
|
||||
New-PSDrive -PSProvider "Registry" -Root "HKEY_CLASSES_ROOT" -Name "HKCR"
|
||||
mkdir -Force "HKCR:\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}"
|
||||
Set-ItemProperty "HKCR:\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" "System.IsPinnedToNameSpaceTree" 0
|
||||
mkdir -Force "HKCR:\Wow6432Node\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}"
|
||||
Set-ItemProperty "HKCR:\Wow6432Node\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" "System.IsPinnedToNameSpaceTree" 0
|
||||
Remove-PSDrive "HKCR"
|
||||
|
||||
# Thank you Matthew Israelsson
|
||||
Write-Output "Removing run hook for new users"
|
||||
reg load "hku\Default" "C:\Users\Default\NTUSER.DAT"
|
||||
reg delete "HKEY_USERS\Default\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "OneDriveSetup" /f
|
||||
reg unload "hku\Default"
|
||||
|
||||
Write-Output "Removing startmenu entry"
|
||||
Remove-Item -Force -ErrorAction SilentlyContinue "$env:userprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk"
|
||||
|
||||
Write-Output "Removing scheduled task"
|
||||
Get-ScheduledTask -TaskPath '\' -TaskName 'OneDrive*' -ea SilentlyContinue | Unregister-ScheduledTask -Confirm:$false
|
||||
|
||||
Write-Output "Restarting explorer"
|
||||
Start-Process "explorer.exe"
|
||||
|
||||
Write-Output "Waiting for explorer to complete loading"
|
||||
Start-Sleep 10
|
||||
|
||||
Write-Output "Removing additional OneDrive leftovers"
|
||||
foreach ($item in (Get-ChildItem "$env:WinDir\WinSxS\*onedrive*")) {
|
||||
Takeown-Folder $item.FullName
|
||||
Remove-Item -Recurse -Force $item.FullName
|
||||
}
|
||||
Write-Output "Clippy can confirm the uninstallation of the OneDrive app."
|
||||
1
extensions/RestoreInboxApps.ps1
Normal file
1
extensions/RestoreInboxApps.ps1
Normal file
@ -0,0 +1 @@
|
||||
Get-AppxPackage -allusers | foreach {Add-AppxPackage -register "$($_.InstallLocation)\appxmanifest.xml" -DisableDevelopmentMode}
|
||||
Loading…
Reference in New Issue
Block a user