[Summary view] [Print] [Text view]

   1  rem netsh firewall reset
   2  reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile /v DoNotAllowExceptions /t REG_DWORD /d 0 /f
   3  reg add HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile /v DoNotAllowExceptions /t REG_DWORD /d 0 /f
   4  netsh firewall set portopening protocol=UDP port=137 name=se3_137 mode=ENABLE scope=CUSTOM addresses=%se3ip%/255.255.255.255
   5  netsh firewall set portopening protocol=TCP port=139 name=se3_139 mode=ENABLE scope=CUSTOM addresses=%se3ip%/255.255.255.255
   6  netsh firewall set portopening protocol=UDP port=138 name=se3_138 mode=ENABLE scope=CUSTOM addresses=%se3ip%/255.255.255.255
   7  netsh firewall set portopening protocol=TCP port=445 name=se3_445 mode=ENABLE scope=CUSTOM addresses=%se3ip%/255.255.255.255
   8  reg delete "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" /v "AutoShareWks" /f 2>NUL
   9  reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" /v "ForceGuest" /t "REG_DWORD" /d "0" /f 2>NUL 
  10  reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\NetCache" /v "Formatdatabase" /t "REG_DWORD" /d "1" /F 2>NUL
  11  reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\NetCache" /v "Enabled" /t "REG_DWORD" /d "0" /F 2>NUL
  12  
  13  :: recherche du numero de version gpo et on l'incremente si il existe.
  14  for /f "tokens=2 delims=x" %%a in ('reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Group Policy\State\Machine\GPO-List\0" /v Version ^| findstr REG_DWORD') do set /a VERSION=0x%%a+65537
  15  if "%VERSION%"=="" set VERSION=65537
  16  
  17  %sharecmd%
  18  rd /S /Q %SYSTEMROOT%\System32\GroupPolicy
  19  mkdir %SYSTEMROOT%\System32\GroupPolicy
  20  mkdir %SYSTEMROOT%\System32\GroupPolicy\Machine
  21  mkdir %SYSTEMROOT%\System32\GroupPolicy\Machine\Scripts
  22  mkdir %SYSTEMROOT%\System32\GroupPolicy\Machine\Scripts\Startup
  23  mkdir %SYSTEMROOT%\System32\GroupPolicy\Machine\Scripts\Shutdown
  24  mkdir %SYSTEMROOT%\System32\GroupPolicy\User
  25  mkdir %SYSTEMROOT%\System32\GroupPolicy\User\Scripts
  26  mkdir %SYSTEMROOT%\System32\GroupPolicy\User\Scripts\logon
  27  mkdir %SYSTEMROOT%\System32\GroupPolicy\User\Scripts\logoff
  28  :: cacls.exe "%SYSTEMROOT%\System32\GroupPolicy" /E /T /G "BUILTIN\Administrateurs":F /C >NUL
  29  copy \\%se3ip%\netlogon\scriptsC.ini %SYSTEMROOT%\System32\GroupPolicy\Machine\Scripts\scripts.ini
  30  copy \\%se3ip%\netlogon\machine\%machine%\user.pol %SYSTEMROOT%\System32\GroupPolicy\User\registry.pol
  31  copy \\%se3ip%\netlogon\machine\%machine%\printers.vbs %SYSTEMROOT%\printers.vbs
  32  copy \\%se3ip%\netlogon\machine\%machine%\machine.pol %SYSTEMROOT%\System32\GroupPolicy\Machine\registry.pol
  33  copy \\%se3ip%\netlogon\machine\%machine%\startup.cmd %SYSTEMROOT%\System32\GroupPolicy\Machine\Scripts\Startup\startup.cmd
  34  copy \\%se3ip%\netlogon\machine\%machine%\shutdown.cmd %SYSTEMROOT%\System32\GroupPolicy\Machine\Scripts\Shutdown\shutdown.cmd
  35  :: scripts user ?
  36  copy \\%se3ip%\netlogon\scriptsU.ini %SYSTEMROOT%\System32\GroupPolicy\User\Scripts\scripts.ini
  37  copy \\%se3ip%\netlogon\machine\%machine%\shutdown.cmd %SYSTEMROOT%\System32\GroupPolicy\User\Scripts\Logoff\logoff.cmd
  38  del /f /s /q %SYSTEMROOT%\web\wallpaper\se3.bmp
  39  if exist \\%se3ip%\Docs\media\fonds_ecran\%user%.bmp copy \\%se3ip%\Docs\media\fonds_ecran\%user%.bmp %SYSTEMROOT%\web\wallpaper\se3.bmp
  40  
  41  :: creation du fichier gpt.ini
  42  echo [general]>%SYSTEMROOT%\System32\GroupPolicy\gpt.ini
  43  echo Version=%VERSION%>>%SYSTEMROOT%\System32\GroupPolicy\gpt.ini
  44  echo gPCUserExtensionNames=[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957E-509E-11D1-A7CC-0000F87571E3}][{42B5FAAE-6536-11D2-AE5A-0000F87571E3}{40B66650-4972-11D1-A7CA-0000F87571E3}]>>%SYSTEMROOT%\System32\GroupPolicy\gpt.ini
  45  echo gPCMachineExtensionNames=[{35378EAC-683F-11D2-A89A-00C04FBBCFA2}{0F6B957D-509E-11D1-A7CC-0000F87571E3}][{42B5FAAE-6536-11D2-AE5A-0000F87571E3}{40B6664F-4972-11D1-A7CA-0000F87571E3}]>>%SYSTEMROOT%\System32\GroupPolicy\gpt.ini
  46  :: inutile, on les DL au logon
  47  :: copy  %SYSTEMROOT%\System32\GroupPolicy\gpt.ini \\%se3ip%\netlogon\machine\%machine%\gpt.ini
  48  
  49  cacls %SYSTEMROOT%\System32\GroupPolicy\User\registry.pol /E /G %domain%\%user%:R
  50  cacls %SYSTEMROOT%\System32\GroupPolicy\gpt.ini /E /G %domain%\%user%:R
  51  gpupdate /force
  52  echo cpau ok>%SYSTEMROOT%\System32\GroupPolicy\Se3.log
  53  echo %VERSION%>>%SYSTEMROOT%\System32\GroupPolicy\Se3.log
  54  time /T >> %SYSTEMDRIVE%\netinst\logs\domscripts.txt
  55  echo cpau ok>> %SYSTEMDRIVE%\netinst\logs\domscripts.txt
  56  echo %VERSION%>> %SYSTEMDRIVE%\netinst\logs\domscripts.txt