You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
34 lines
1.7 KiB
34 lines
1.7 KiB
title: Configuration
|
|
privilege: TrustedInstaller
|
|
actions:
|
|
- !writeStatus: {status: 'Configuring permissions'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System', value: 'ConsentPromptBehaviorAdmin', type: REG_DWORD, data: '5'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System', value: 'ConsentPromptBehaviorUser', type: REG_DWORD, data: '3'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System', value: 'EnableInstallerDetection', type: REG_DWORD, data: '1'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System', value: 'EnableLUA', type: REG_DWORD, data: '1'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System', value: 'EnableVirtualization', type: REG_DWORD, data: '1'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System', value: 'PromptOnSecureDesktop', type: REG_DWORD, data: '1'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System', value: 'ValidateAdminCodeSignatures', type: REG_DWORD, data: '0'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System', value: 'FilterAdministratorToken', type: REG_DWORD, data: '0'}
|
|
|
|
- !run:
|
|
exeDir: true
|
|
exe: "ADMIN.bat"
|
|
weight: 10
|
|
|
|
- !writeStatus: {status: 'Implementing SFC mitigation'}
|
|
- !run:
|
|
exeDir: true
|
|
exe: "SFCDEPLOY.bat"
|
|
weight: 5
|
|
|
|
- !writeStatus: {status: 'Configuring start menu'}
|
|
- !run:
|
|
exeDir: true
|
|
exe: "STARTMENU.bat"
|
|
weight: 15
|
|
|
|
- !writeStatus: {status: 'Modifying login screen'}
|
|
- !run:
|
|
exeDir: true
|
|
exe: "LOGIN.bat"
|