Sign in to follow this  
Followers 0
Briandr

script to enable GPO setting

6 posts in this topic

#1 ·  Posted (edited)

Hi,

I am looking for a script that can enable the following GPO:

Allow non-administrators to install drivers for these device setup classes.

I found this code in another thread. I am hopeful something like this can be used for the setting I am trying to change.

This disables changing home page settings (User ConfigurationAdministrative TemplatesWindows ComponentsInternet Explorer) - Enable

run(@comspec & " /c gpedit.msc")
WinWaitActive("Group Policy")
send("{down 8}{right}")
sleep(1000)
send("{down}{right}")
sleep(1000)
send("{down 2}{tab}")
sleep(1000)
send("{down 11}")
sleep(1000)
send("!ar")
WinWaitActive("Disable changing home page settings Properties")
send("!e")
ControlClick("Disable changing home page settings Properties", "", "Button6" )

I know what the sleep is doing is I am just not sure of the sends. I assume they are mouse clicks or keyboard movements.

Any help adjusting this code would be appreciated. Thanks.

Edited by Briandr

Share this post


Link to post
Share on other sites



Send Sends simulated keystrokes to the active window.

Run Au3Recorder and let it create the AutoIt script for you while you change the setting in GPEdit.


My UDFs and Tutorials:

Spoiler

UDFs:
Active Directory (NEW 2017-04-18 - Version 1.4.8.0) - Download - General Help & Support - Example Scripts - Wiki
OutlookEX (NEW 2017-02-27 - Version 1.3.1.0) - Download - General Help & Support - Example Scripts - Wiki
ExcelChart (2015-04-01 - Version 0.4.0.0) - Download - General Help & Support - Example Scripts
Excel - Example Scripts - Wiki
Word - Wiki
PowerPoint (2015-06-06 - Version 0.0.5.0) - Download - General Help & Support

Tutorials:
ADO - Wiki

 

Share this post


Link to post
Share on other sites

Hi,

Thanks for the information. Do I need to adjust this after running Au3Recorder so that when it is runs with on a system where the user does not have admin rights? I can push the compiled EXE so it runs under the System context. So maybe I don't need to adjust the script??

Share this post


Link to post
Share on other sites

Why do you set the GPO on the client side? Wouldn't it be easier/safer to do it on the server side?


My UDFs and Tutorials:

Spoiler

UDFs:
Active Directory (NEW 2017-04-18 - Version 1.4.8.0) - Download - General Help & Support - Example Scripts - Wiki
OutlookEX (NEW 2017-02-27 - Version 1.3.1.0) - Download - General Help & Support - Example Scripts - Wiki
ExcelChart (2015-04-01 - Version 0.4.0.0) - Download - General Help & Support - Example Scripts
Excel - Example Scripts - Wiki
Word - Wiki
PowerPoint (2015-06-06 - Version 0.0.5.0) - Download - General Help & Support

Tutorials:
ADO - Wiki

 

Share this post


Link to post
Share on other sites

#5 ·  Posted (edited)

I would agree it would make more sense to do it this way. Not sure why an AD OU's can't be tweaked. Its not like its a non AD shop, but I am not sure if all of the computers are in AD. Trust me I don't like the bang head on wall approach.

Edited by Briandr

Share this post


Link to post
Share on other sites

Do I need to adjust this after running Au3Recorder so that when it is runs with on a system where the user does not have admin rights? I can push the compiled EXE so it runs under the System context. So maybe I don't need to adjust the script??

At least "#RequireAdmin" needs to be added to the script.


My UDFs and Tutorials:

Spoiler

UDFs:
Active Directory (NEW 2017-04-18 - Version 1.4.8.0) - Download - General Help & Support - Example Scripts - Wiki
OutlookEX (NEW 2017-02-27 - Version 1.3.1.0) - Download - General Help & Support - Example Scripts - Wiki
ExcelChart (2015-04-01 - Version 0.4.0.0) - Download - General Help & Support - Example Scripts
Excel - Example Scripts - Wiki
Word - Wiki
PowerPoint (2015-06-06 - Version 0.0.5.0) - Download - General Help & Support

Tutorials:
ADO - Wiki

 

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!


Register a new account

Sign in

Already have an account? Sign in here.


Sign In Now
Sign in to follow this  
Followers 0