Skip to content

Commit

Permalink
Removed the dangerous parts
Browse files Browse the repository at this point in the history
  • Loading branch information
@Seth-Johnson
Seth-Johnson committed Nov 13, 2015
1 parent 968c9e7 commit 2d6ccb5
Showing 1 changed file with 59 additions and 59 deletions.
118 changes: 59 additions & 59 deletions CP Windows Basic Setup/cp_Basic_Setup.ps1
View file
Original file line number Diff line number Diff line change
Expand Up @@ -39,14 +39,14 @@ $intro = 'This PowerShell script will help setup some basic settings when harden
Offer to disable the administrator account.
Offer to rename the administrator account.
Install Avast! Anti Virus (providing the installer file named ''avast.exe'' exists in the working directory) and malwarebytes (providing the installer file named ''malwarebytes.exe'' exists in the working directory.
Even though this is a PowerShell script it relies extensively on Windows'' cmd.exe. Tested on Windows 7 and 8. Assumed to work with Vista.'

################################################################################
# Define Functions
################################################################################
################################################################################


function enableWindowsUpdate {
Expand All @@ -56,12 +56,12 @@ Even though this is a PowerShell script it relies extensively on Windows'' cmd.e
$updateObject.NotificationLevel = 4 # make sure recommended updates are included
$updateObject.IncludeRecommendedUpdates = "true"
$updateObject.save() # save the changes
$openUpdate = Read-host 'Do you wish to check for updates now (y/n)?'
$openUpdate = Read-host 'Do you wish to check for updates now (y/n)?'
if ($openUpdate -eq 'y') {
control update # start the control panel for windows update
}
}

function enableFirewall {
# enable windows firewall
Write-host 'Enabling Windows firewall...'
Expand All @@ -70,7 +70,7 @@ Even though this is a PowerShell script it relies extensively on Windows'' cmd.e
# fall back to older system
netsh advfirewall set allprofiles state on
}

function setLocalSecurityPolicies {
# set up local security policies
Write-host 'Set account lockout to 5...'
Expand All @@ -80,90 +80,90 @@ Even though this is a PowerShell script it relies extensively on Windows'' cmd.e
Write-host 'Remember to enable "Password must meet complexity requirements under "Account Policies" -> "Password Policy".'
Start-process secpol.msc -Wait
}

function setupAuditing {
# Set up auditing
# Set up auditing
Write-host 'Setting up auditing...'
$auditCategories = @("Account Logon","Account Management","Detailed Tracking","DS Access","Logon/Logoff","Object Access","Policy Change","Privilege Use","System") # audit categories as of Windows 8.1 U1. Do not change this unless you know what you are doing
foreach ($i in $auditCategories) {
C:\Windows\System32\cmd.exe /C auditpol.exe /set /category:"$i" /failure:enable # set all audit categories (defined in $auditCategories) to audit failures
}
}

function disableGuestAccount {
# disable the guest account
Write-host 'Disabling the guest account...'
C:\Windows\System32\cmd.exe /C net user Guest /active:no # disable the guest account
}

function makePasswordsExpire {
# make sure that all users have non-expiring passwords
# make sure that all users have non-expiring passwords
Write-host 'Make all user passwords expireable, except guest...'
C:\Windows\System32\cmd.exe /C wmic path Win32_UserAccount where PasswordExpires=false set PasswordExpires=true
C:\Windows\System32\cmd.exe /C wmic path Win32_UserAccount where Name="Guest" set PasswordExpires=false # We don't really want to do this for guest, so make sure it doesn't have an expiring password
}
function renameAdministratorAccount {
# offer to rename the administrator account
$rename_admin_account = read-host 'Do you wish to rename the administrator account to "Dude"? (y/n)'
if ($rename_admin_account -eq 'y') {
$adminAccount = Get-WMIObject Win32_UserAccount -Filter "Name='Administrator'" # Get the admin account
$adminAccount.Rename('Dude') # rename him (you can change this)
}
}
function disableAdministratorAccount {
# offer to disable the Administrator account
$disable_admin_account = read-host 'Do you wish to disable the administrator account? (recommended) (y/n)'
if ($disable_admin_account -eq 'y') {
C:\Windows\System32\cmd.exe /C net user Administrator /active:no # disable the admin account
}
}

#function renameAdministratorAccount {
# # offer to rename the administrator account
# $rename_admin_account = read-host 'Do you wish to rename the administrator account to "Dude"? (y/n)'
# if ($rename_admin_account -eq 'y') {
# $adminAccount = Get-WMIObject Win32_UserAccount -Filter "Name='Administrator'" # Get the admin account
# #$adminAccount.Rename('Dude') # rename him (you can change this)
# }
#}

#function disableAdministratorAccount {
# # offer to disable the Administrator account
# $disable_admin_account = read-host 'Do you wish to disable the administrator account? (recommended) (y/n)'
# if ($disable_admin_account -eq 'y') {
# C:\Windows\System32\cmd.exe /C net user Administrator /active:no # disable the admin account
# }
#}

function setUserPasswords {
# Offer to set all user passwords
Write-host 'Do you want to set all user passwords to "CyberPatriot1" (y/n)?'
# Offer to set all user passwords
Write-host 'Do you want to set all user passwords to "CyberPatriot1" (y/n)?'
$set_passwords = read-host 'WARNING: This is a quick, easy way to ensure all accounts on your CP image are password protected, but IT SHOULD NEVER BE DONE ON A PRODUCTION MACHINE!'
if ($set_passwords -eq 'y') {
if ($set_passwords -eq 'y') {
$password = 'CyberPatriot1' # set what the user password will be (you can change this)
$accounts = get-wmiobject Win32_UserAccount -filter 'LocalAccount=TRUE' | select-object -expandproperty Name # get a list of user accounts

foreach ($i in $accounts) {
if ($i -eq 'HomeGroupUser$') { continue } # We don't need to worry about the homegroup user
C:\Windows\System32\cmd.exe /C net user $i $password # set the user password to the password defined above --^
}
}
}
function installMalwarebytes {
if (Test-Path malwarebytes.exe) {
Write-host 'Found malwarebytes, installing...'
Invoke-expression ".\\malwarebytes.exe /silent"
}
else {
Write-host 'No file with the name ''malwarebytes.exe'' found in the working directory, aborting.'
}
}
function installAvast {
if (Test-path avast.exe) {
Write-host 'Found avast, installing...'
Invoke-expression ".\\avast.exe /silent /nooffers"
Write-host 'This may take some time.'
}
else {
Write-host 'No file with the name ''avast.exe'' found in the working directroy, aborting.'
}
}

#function installMalwarebytes {
# if (Test-Path malwarebytes.exe) {
# Write-host 'Found malwarebytes, installing...'
# Invoke-expression ".\\malwarebytes.exe /silent"
# }
# else {
# Write-host 'No file with the name ''malwarebytes.exe'' found in the working directory, aborting.'
# }
#}

#function installAvast {
# if (Test-path avast.exe) {
# Write-host 'Found avast, installing...'
# Invoke-expression ".\\avast.exe /silent /nooffers"
# Write-host 'This may take some time.'
# }
# else {
# Write-host 'No file with the name ''avast.exe'' found in the working directroy, aborting.'
# }
#}

function autoMode {
# run all the functions in the $functions array
foreach ($i in $functions) {
if ($i -eq 'autoMode') { continue } # no need to run this function, that would be bad!
else { Invoke-expression $i } # if $i doesn't equal this function, run the function
}
}

function manualMode {
Write-host "Available functions:`n"
foreach ($i in $functions) {
Expand All @@ -174,9 +174,9 @@ Even though this is a PowerShell script it relies extensively on Windows'' cmd.e
Invoke-expression $i
}
}

################################################################################
# Script execution starts here
# Script execution starts here
################################################################################

if ($args) { # check if there are any arguments...
Expand All @@ -188,7 +188,7 @@ Even though this is a PowerShell script it relies extensively on Windows'' cmd.e
}
else { # if there is no match, print an error message.
if ($x -eq $functions[-1]) { # don't print the error message until we're at the last function (otherwise we would print the error for every command and arguments. Yikes!
Write-host "${i}: Command not found."
Write-host "${i}: Command not found."
}
else {
continue
Expand All @@ -207,7 +207,7 @@ Even though this is a PowerShell script it relies extensively on Windows'' cmd.e
manualMode
}
}

################################################################################
# END
################################################################################

0 comments on commit 2d6ccb5

Please sign in to comment.