Techno Chat|Tech Blog!! » Scripts

How to stop extracting/viewing users details from AD

Saugata — Sat, 19 Nov 2011 07:25:11 +0000

There are several tools/script available for extracting all user information from AD. Any domain users can access this information by default.

For an example, using following attached .vbs script, we can dump entire AD users base to a excel file with following fields.
Note: There is a file embedded within this post, please visit this post to download the file.

SamAccountName
CN
FirstName
LastName
Initials
Descrip
Office
Telephone
Email
WebPage
Addr1
City
State
ZipCode
Title
Department
Company
Manager
Profile
LoginScript
HomeDirectory
HomeDrive
Adspath
LastLogin
Primary
SMTP

I think, it is kind of security risk.

This can be block, you just have to follow few steps:

1. You have to create a security group. Here we create blockinfo group

2. Now you have to restrict List Content and Read All Properties on OU where all users are stored and add the normal users into this group.

3. To test, run the above script again, and you will get no output.

With this you can prevent block any reporting tool/script..

BAT/CMD Script Log Generator

Saugata — Tue, 10 Nov 2009 16:18:40 +0000

BAT/CMD scripts are very much helpful to do a monotonous job automatically and sometimes the outputs of the batch script file are very much required. We can generate log file from batch file, but we can't get the 100% log within batch file, so I was looking for a tool which generate log files from a batch script. After a few search, finally I found a tiny utility called wtee.exe on wintee.

To use it properly, I have created a batch file with which u can execute any batch script, and after executing the batch file it will automatically archive the entire output log, also there is an option to send mail notification with the output file as mail attachment (optional). For sending mail notification I used blat.exe from www.blat.net.

Default settings are followsâ€¦

REM Settings Start
::Set Destination, source drive, and restore folder
set LogPath=D:\TCleanLog
set LogName=TempCleanLog
set LogExt=.log
set WinTee=wtee.exe
::Here specify your BAT/CMD Script File
set CallBAT=D:\AutoTempCleanUp.bat
::E-Mail Settings (SMTP)
::----------x---------
::If 'yes' a mail will be fired after backup
::~~~~~~~~~~~~~~~~~~~~
set _mailnotification=yes
::If 'yes' backup log will attached with mail
::~~~~~~~~~~~~~~~~~~~~
set attachment=no
::Type your e-mail address(for multiple e-mail ID, use ',')
::~~~~~~~~~~~~~~~~~~~~
set email=To Mail Adress
:: Type from mail ID
::~~~~~~~~~~~~~~~~~~~~
set from=From Mail Address
::Set SMTP Server IP Address
::~~~~~~~~~~~~~~~~~~~~
set mserver=Your Mail Server IP
REM Settings End

Here is the complete scriptâ€¦

^?View Code WINBATCH

@echo off
MODE CON: COLS=100 LINES=10
color 0c
title ~: BAT File Log Generator :~
REM Settings Start
::Set Destination, source drive, and restore folder
set LogPath=D:\TCleanLog
set LogName=TempCleanLog
set LogExt=.log
set WinTee=wtee.exe
::Here specify your BAT/CMD Script File
set CallBAT=D:\AutoTempCleanUp.bat
::E-Mail Settings (SMTP)
::----------x---------
::If 'yes' a mail will be fired after backup
::~~~~~~~~~~~~~~~~~~~~
set _mailnotification=yes
::If 'yes' backup log will attached with mail
::~~~~~~~~~~~~~~~~~~~~
set attachment=no
::Type your e-mail address(for multiple e-mail ID, use ',')
::~~~~~~~~~~~~~~~~~~~~
set email=To Mail Adress
:: Type from mail ID
::~~~~~~~~~~~~~~~~~~~~
set from=From Mail Address
::Set SMTP Server IP Address
::~~~~~~~~~~~~~~~~~~~~
set mserver=Your Mail Server IP
REM Settings End
:: get the date and time and then into single variable
for /F "tokens=1-4 delims=/ " %%i in ('date /t') do (
set MM=%%j
set DD=%%k
set YYYY=%%l
set date=%%k-%%j-%%l
set dirdate=%%j%%k%%l
)
::Calling BAT /CMD File
call %CallBAT% | %WinTee% %LogPath%\%LogName%_%date%%LogExt%
::Full Log Path
set flog=%LogPath%\%LogName%_%date%%LogExt%
if not "%_mailnotification%" == "yes" goto _end
if not "%attachment%" == "yes" goto _noattach
blat "%flog%" -attach "%flog%" -to %email% -s "%LogName% of %date%" -f "%from%" -server "%mserver%" &gt; nul
goto _skip
:_noattach
blat "%flog%" -to %email% -s "%LogName% of %date%" -f "%from%" -server "%mserver%" &gt; nul
:_end
exit

Download wtee.exe and blat.exe from following link and extract it to windows directory.
Note: There is a file embedded within this post, please visit this post to download the file.

AJAX Web Chat Server with Active Directory Authentication

Saugata — Sat, 08 Aug 2009 12:52:15 +0000

Again, as per business requirement, we are looking for some free internal (LAN) chat solution. There are some free LAN chat tools available but most of them are failed to detect multiple VLAN, only working fine in single VLAN.

But we need something which can be implemented on more than 50 branches across India. So we are looking for a free chat server. There are some chat servers available, but none of them support Active Directory (LDAP) authentication.

Suddenly we found a solution, actually it's not a single solution, it a combine solution of PHPBB3 and AJAX Chat.

Requirements:

PHP
MySql
PHPBB3 with LDAP Authentication
AJAX Chat

For PHP and MySql with Apache web Server you can use Wamp Server.

Instalation:

You have to install PHPBB3 first, for PHPBB3 installation help click here.

Now you have to set Active Directory authentication for PHPBB3. For that first you have to enable LDAP extension on php and you have to create a user id in active directory with password never expire enabled. Then you have to create the same id in PHPBB3, if you decided to use displayName as all users ID then you have create that ID same as displayName or else you can use sAMAccountName as all users logon id, for that case you have to create that ID same as sAMAccountName.

For e.g., you create the ID as PHPBB User and its logon id is phpuse, in this case displayName = PHPBB User and sAMAccountName = phpuse.*

After that you have to give founder permission on PHPBB3 on that ID, and logon with that ID in phpbb, then goto ACP>General>Authentication, Select an authentication method as LDAP and use following as per your domain.

LDAP server name: Your Active Directory Server IP
LDAP server port: Port will be default
LDAP base dn: DC=donainname,DC=com
LDAP uid: displayName or sAMAccountName *
LDAP user filter: ObjectClass=person
LDAP e-mail attribute: mail **
LDAP user dn: cn=username,ou=ou name,dc=domain,dc=com
LDAP password: Password of above user id.

If you specify everything properly, then you will get following screen.

Note:
*If you set displayName in LDAP uid, then user id will be their domain Display Name, and if you set sAMAccountName then user id will be domain logon id.
**We have Exchange Server in our network so for that we use mail as e-mail attribute.

Now you have to install AJAX Chat on PHPBB3, download AJAX Chat from bellow link, and extract it into PHPBB3 install directory and execute following path.
http://example.org/phpBB3/chat/install.php

For further details, read supplied readme.txt

Download(with Small modification):
Note: There is a file embedded within this post, please visit this post to download the file.

All Done,

Now go to http://example.org/phpBB3/chat and logon with any domain user id and password.

After logon u can easily chat with others...

I think this is the easiest way to install chat server on your organization for freeâ€¦

Shared TempDrive Cleanup Script – Automated

Saugata — Thu, 23 Jul 2009 11:24:50 +0000

Sometimes it's not possible to remember a specific weekly job to perform. So if we can make it as scheduled job to do the same, it will be better. There will be not such risk. Just take my example, I have to clean our office common shared temporary folder on every Sunday, but I am not in office on Sunday. So, I have two options to do the same, first, I have to call our DCO Support and instruct them to get the job done, and if I go with this option there will be lots of dependencies, or else I have to create a script which will do the job automatically.

So I decided to go for second option. With second option I have to make sure following things should be perform.

I just can't delete all files & folder from temp drive, coz there might came some requirement to recover files from last week temp drive(Yes, everyone aware of the temp drive policy). So, I have to copy all the content of the Temp Drive to a different location.
I have to create a folder with date stamp, eg. Folder_date (tempbkp_23-09-2009). So, I have to create a specific date variable.
After copy all content of the temp drive to other location, I have to give Everyone â€“ Read only permission to that folder and then have to share that folder as well.
Delete all files and folder from temp drive. Yea, as per my knowledge, there is no such command available on windows by which I can delete all files and folder from a specific folder or a specific map drive. (Soâ€¦..time to think some alternatives)
Now the critical part, on next scheduled date, this script will automatically delete last backup folder, and create a new folder for latest backup.

And finally I made it with considering all above requirement without using any third part toolsJ. And as of now it's working properly, check out the script bellow.

^?View Code WINBATCH

@echo off
@echo off
MODE CON: COLS=100 LINES=10
color 0c
title ~: Auto TempFile Cleanup By TechnoChat.IN :~
::Set Destination and source drive
set localdrive=D:\
set tempdrive=Z:\
:: get the date and time and then into single variable
for /F "tokens=1-4 delims=/ " %%i in ('date /t') do (
set MM=%%j
set DD=%%k
set YYYY=%%l
set date=%%k-%%j-%%l
set dirdate=%%j%%k%%l
)
set fullpath=%localdrive%TempBKP_%date%
set sname=TempBKP
::Get the old Backup path from registry.
FOR /F "TOKENS=3*" %%i in ('reg query "HKEY_CURRENT_USER\SOFTWARE\Microsoft" /v Path ^| FINDSTR "REG_SZ" ') do set outpath="%%i%%j"
::Removing the old backup share
if exist %outpath% net share %sname% /delete
::Removing old backup folder
if exist %outpath% rmdir %outpath% /S /Q
::Creatiing the the New backup folder
mkdir %fullpath%
::Adding the New backup path into registry
REG ADD "HKEY_CURRENT_USER\Software\Microsoft" /v Path /t REG_SZ /d %fullpath% /f &gt;nul
echo Copying files from Source %tempdrive% to Destination [%fullpath%]
::Copying the files from TEMP Drive to Local Drive location
xcopy /e /h /r /y "%tempdrive%" "%fullpath%"
::Setting the permission to readonly for hole folder
cacls %fullpath% /e /t /g Everyone:r
::Sharing the folder
net share %sname%=%fullpath% /remark:"TempDrive Backup Share"
::Removing the temp drive contents
for /f "delims=" %%a in ('dir /b /ad "%tempdrive%" 2^>NUL') do rmdir /S /Q "%tempdrive%\%%a"
del %tempdrive%*.* /S /Q /F

Automatic NT-Backup (System State Backup) with retention period and e-mail notification after complete.

Saugata — Wed, 25 Mar 2009 11:48:12 +0000

A simple script for automatic System State backup where you can easily set backup retention period and it also send you an e-mail notification after completion. With this script you can also archive backup log and if you wish u can also set backup log retention period. It can also set backup files with date stamp.
For e.g., SysBackup_ComputerName_24-03-2009.bkf
You need two small utility,

Blat.exe for sending mail, you can get details from here.
Forfiles.exe for checking old files, you can get details from here.

Just download following zip file and extract its content to %windir%\ or %windir%\system32 folder.
Note: There is a file embedded within this post, please visit this post to download the file.
Mail Notification

Following are the basic Backup Settings

::Backup Settings START
::Set Backup Path
::~~~~~~~~~~~~~~~~~~~~
set savepath=D:\TestBackup
::Set Backup Name
::~~~~~~~~~~~~~~~~~~~~
set backupname=SysBackup
::Set Backup Retention Period(in days)
::~~~~~~~~~~~~~~~~~~~~
set retention=3
::Set Log Archive Path(Only Folder Name)
::~~~~~~~~~~~~~~~~~~~~
set logarchivepath=BackupLog
::If 'yes' then backup log retention will enabled
::~~~~~~~~~~~~~~~~~~~~
set logretention=yes
::If avove settings is "yes" then set log Retention Period(in days)
::~~~~~~~~~~~~~~~~~~~~
set logretentionperiod=3
::----------x---------
::E-Mail Settings (SMTP without authentication will work)
::----------x---------
::If 'yes' a mail will be fired after backup
::~~~~~~~~~~~~~~~~~~~~
set _mailnotification=yes
::If 'yes' backup log will attached with mail
::~~~~~~~~~~~~~~~~~~~~
set attachment=no
::Type your e-mail address(for multiple e-mail ID, use ',')
::~~~~~~~~~~~~~~~~~~~~
set email=urname@domain.com
:: Type from mail ID
::~~~~~~~~~~~~~~~~~~~~
set from=%computername%@TC-Auto-NTBackUP
::Set SMTP Server IP Address
::~~~~~~~~~~~~~~~~~~~~
set mserver=10.0.0.1
::Backup Settings END

Batchfile NTBackup.bat

^?View Code WINBATCH

@echo off
color 0c
MODE CON: COLS=50 LINES=11
echo ***************************************
echo Auto SystemState Backup with Retention
echo Log Archive and Mail Notification
echo Code By : Saugata Datta
echo ~~~
echo (c) http://technochat.in
echo Date: %DATE%, Time: %TIME%
echo ***************************************
::Backup Settings START
::Set Backup Path
::~~~~~~~~~~~~~~~~~~~~
set savepath=D:\TestBackup
::Set Backup Name
::~~~~~~~~~~~~~~~~~~~~
set backupname=SysBackup
::Set Backup Retention Period(in days)
::~~~~~~~~~~~~~~~~~~~~
set retention=3
::Set Log Archive Path(Only Folder Name)
::~~~~~~~~~~~~~~~~~~~~
set logarchivepath=BackupLog
::If 'yes' then backup log retention will enabled
::~~~~~~~~~~~~~~~~~~~~
set logretention=yes
::If avove settings is "yes" then set log Retention Period(in days)
::~~~~~~~~~~~~~~~~~~~~
set logretentionperiod=3
::----------x---------
::E-Mail Settings (SMTP without authentication will work)
::----------x---------
::If 'yes' a mail will be fired after backup
::~~~~~~~~~~~~~~~~~~~~
set _mailnotification=yes
::If 'yes' backup log will attached with mail
::~~~~~~~~~~~~~~~~~~~~
set attachment=no
::Type your e-mail address(for multiple e-mail ID, use ',')
::~~~~~~~~~~~~~~~~~~~~
set email=saugata.datta@technochat.in
:: Type from mail ID
::~~~~~~~~~~~~~~~~~~~~
set from=%computername%@FC-Auto-NTBackUP
::Set SMTP Server IP Address
::~~~~~~~~~~~~~~~~~~~~
set mserver=10.0.0.6
::Backup Settings END
::--------------------------------
::Don't change following lines.
::--------------------------------
forfiles -p "%savepath%" /m *.bkf /s /d -%retention% /c "cmd /C del @FILE"
:: get the date and time and then into single variable
for /F "tokens=1-4 delims=/ " %%i in ('date /t') do (
set MM=%%j
set DD=%%k
set YYYY=%%l
set date=%%k-%%j-%%l
set dirdate=%%j%%k%%l
)
for /f "Tokens=1-2 delims=/ " %%i in ('time /t') do (
set tm=%%i
set ampm=%%j
)
::Deleting Old Backup Log files
if not exist "%SystemDrive%%HOMEPATH%\Local Settings\Application Data\Microsoft\Windows NT\NTbackup\Data\*.log" goto _nodel
del "%SystemDrive%%HOMEPATH%\Local Settings\Application Data\Microsoft\Windows NT\NTbackup\Data\*.log" &gt;nul
:_nodel
ntbackup.exe backup systemstate /v:no /r:no /rs:no /hc:off /J %backupname% /l:s /f "%savepath%\%backupname%_%computername%_%date%.bkf"
if not exist "%savepath%\%logarchivepath%" md "%savepath%\%logarchivepath%" &gt;nul
move "%SystemDrive%%HOMEPATH%\Local Settings\Application Data\Microsoft\Windows NT\NTbackup\Data\*.log" %savepath%\%logarchivepath%\%backupname%_%computername%_%date%.txt &gt;nul
if not "%_mailnotification%" == "yes" goto _end
if not "%attachment%" == "yes" goto _noattach
blat "%savepath%\%logarchivepath%\%backupname%_%computername%_%date%.txt" -attach "%savepath%\%logarchivepath%\%backupname%_%computername%_%date%.txt" -to %email% -s "NT Backup Success/Failure Report of %computername%" -f "%from%" -server "%mserver%" &gt; nul
goto _skip
:_noattach
blat "%savepath%\%logarchivepath%\%backupname%_%computername%_%date%.txt" -to %email% -s "NT Backup Success/Failure Report of %computername%" -f "%from%" -server "%mserver%" &gt; nul
:_skip
if not "%logretention%" == "yes" goto _end
forfiles -p "%savepath%\%logarchivepath%" /m *.txt /s /d -%logretentionperiod% /c "cmd /C del @FILE"
:_end
exit

Now you have to create a schedule for daily backup.

Simple script for Windows Profile Backup and Restore

Saugata — Fri, 20 Mar 2009 15:23:09 +0000

A very simple script for automate user profile backup and restore. Easy to use, and highly customizable, so you can modify it as per your needs.

Code:

^?View Code WINBATCH

@echo off
color 0c
REM PBR_AUTO.BAT
REM Created by Saugata Datta
REM Version 0.01
REM Auto Profile Backup and Restore
MODE CON: COLS=50 LINES=20
setlocal
%~d0
cd "%~dp0"
:_tsk
title Auto Profile Backup and Restore...
set _task=
cls
echo _____/TechnoChat.IN_______________________________
echo       Auto Profile Backup and Restore
echo                    By : Saugata Datta
echo _______________________________________/2009______
 
echo   [A] - Backup Domain Profile
echo   [B] - Restore Domain Profile
echo   [Q] - QUIT
echo.
set /p _task=Your Choice [in small]:
echo.
if "%_task%" == "a" goto _bkp
if "%_task%" == "b" goto _res
if "%_task%" == "q" goto _quit
if not "%_task%" == "a or b or q" goto _tsk
 
:_bkp
cd\
set /p _uname=Type user account Name:
%SystemDrive%
cd "Documents and Settings"
if not exist %_uname% (echo Wrong user name..
goto _bkp)
:_drv
set /p _drive=Type Drive letter[like D]:
if not exist %_drive%:\RECYCLER (echo Wrong drive...
goto _drv)
if exist "%_drive%:\%_uname%_apbr" ( echo Deleting old Backup
rmdir /s /q "%_drive%:\%_uname%_apbr")
mkdir "%_drive%:\%_uname%_apbr"
mkdir "%_drive%:\%_uname%_apbr\Favorites"
mkdir "%_drive%:\%_uname%_apbr\Desktop"
mkdir "%_drive%:\%_uname%_apbr\My Documents"
mkdir "%_drive%:\%_uname%_apbr\Recent"
mkdir "%_drive%:\%_uname%_apbr\Application Data"
mkdir "%_drive%:\%_uname%_apbr\Application Data\Microsoft"
mkdir "%_drive%:\%_uname%_apbr\Application Data\Microsoft\Office"
mkdir "%_drive%:\%_uname%_apbr\Application Data\Microsoft\Outlook"
mkdir "%_drive%:\%_uname%_apbr\Local Settings\History"
echo %cd%
xcopy /e /h /r /y "%_uname%\Favorites" "%_drive%:\%_uname%_apbr\Favorites"
xcopy /e /h /r /y "%_uname%\Desktop" "%_drive%:\%_uname%_apbr\Desktop"
xcopy /e /h /r /y "%_uname%\My Documents" "%_drive%:\%_uname%_apbr\My Documents"
xcopy /e /h /r /y "%_uname%\Application Data\Microsoft\Office" "%_drive%:\%_uname%_apbr\Application Data\Microsoft\Office"
xcopy /e /h /r /y "%_uname%\Application Data\Microsoft\Outlook" "%_drive%:\%_uname%_apbr\Application Data\Microsoft\Outlook"
xcopy /e /h /r /y "%_uname%\Local Settings\History" "%_drive%:\%_uname%_apbr\Local Settings\History"
goto _bsucc
 
:_res
cd\
set /p _uname=Type user account Name:
%SystemDrive%
cd "Documents and Settings"
if not exist %_uname% (echo Wrong user name..
goto _res)
:_drv2
set /p _rdes=Type backup drive:
if not exist %_rdes%:\RECYCLER (echo Wrong drive...
goto _drv2)
if not exist %_rdes%:\%_uname%_apbr (echo Old backup not available...
cd\
goto _res)
xcopy /e /h /r /y "%_rdes%:\%_uname%_apbr\Favorites" "%_uname%\Favorites"
xcopy /e /h /r /y "%_rdes%:\%_uname%_apbr\Desktop" "%_uname%\Desktop"
xcopy /e /h /r /y "%_rdes%:\%_uname%_apbr\My Documents" "%_uname%\My Documents"
xcopy /e /h /r /y "%_rdes%:\%_uname%_apbr\Application Data\Microsoft\Office" "%_uname%\Application Data\Microsoft\Office"
xcopy /e /h /r /y "%_rdes%:\%_uname%_apbr\Application Data\Microsoft\Outlook" "%_uname%\Application Data\Microsoft\Outlook"
xcopy /e /h /r /y "%_rdes%:\%_uname%_apbr\Local Settings\History" "%_uname%\Local Settings\History"
goto _rsucc
 
:_rsucc
@echo off
MODE CON: COLS=34 LINES=4
echo.
echo     *** Restore Successful ***
echo.
pause &gt;nul
goto _quit
 
:_bsucc
@echo off
MODE CON: COLS=34 LINES=10
echo.
echo.
echo     *** Backup Successful ***
echo.
echo  Backup taken to following folder
echo.
echo         %_drive%:\%_uname%_apbr
pause &gt;nul
goto _quit
 
:_quit
endlocal
exit

Set File Association via Group Policy

Saugata — Thu, 12 Feb 2009 13:38:21 +0000

Recently after installing FAX Server on our site, we are having some problem with opening received FAX file from user desktop. FAX files are .G3N/.G3F/.CTL of which .G3N and .G3F file can be opened in Windows Image Viewer and .CTL file can be opened in Notepad.

But the problem is, users have to make it their own, or we have to do it manually on all workstation across all branches. But it's almost impossible to do so, so we have to think about some global solution.

Now we start working on creation a Group policy with which we can easily define default file association for those files and finally we created one.

FileAssociation.ADM

^?Download FileAssociation.ADM

CLASS USER
CATEGORY !!category
	CATEGORY "Default Viewer/Icon for G3N File"
	KEYNAME "Software\Classes\.g3n\DefaultIcon"
	 POLICY !!policyg3nicon
	  EXPLAIN !!explain
	  PART Default
	  EDITTEXT
	  DEFAULT "shimgvw.dll,1"
	  VALUENAME ""
	  END PART
	 END POLICY
	END CATEGORY
 
	CATEGORY "Default Viewer/Icon for G3N File"
	KEYNAME "Software\Classes\.g3n\shell\Open\command"
	 POLICY !!policyg3nview
	  EXPLAIN !!explain
	  PART Default
	  EDITTEXT
	  DEFAULT "rundll32.exe C:\WINDOWS\system32\shimgvw.dll,ImageView_Fullscreen %1"
	  VALUENAME ""
	  END PART
	 END POLICY
	END CATEGORY
 
	CATEGORY "Default Viewer/Icon for G3F File"
	KEYNAME "Software\Classes\.g3f\DefaultIcon"
	 POLICY !!policyg3ficon
	  EXPLAIN !!explain
	  PART Default
	  EDITTEXT
	  DEFAULT "shimgvw.dll,1"
	  VALUENAME ""
	  END PART
	 END POLICY
	END CATEGORY
 
	CATEGORY "Default Viewer/Icon for G3F File"
	KEYNAME "Software\Classes\.g3f\shell\Open\command"
	 POLICY !!policyg3fview
	  EXPLAIN !!explain
	  PART Default
	  EDITTEXT
	  DEFAULT "rundll32.exe C:\WINDOWS\system32\shimgvw.dll,ImageView_Fullscreen %1"
	  VALUENAME ""
	  END PART
	 END POLICY
	END CATEGORY
 
	CATEGORY "Default Viewer/Icon for CTL File"
	KEYNAME "Software\Classes\.ctl\DefaultIcon"
	 POLICY !!policyctlicon
	  EXPLAIN !!explain
	  PART Default
	  EDITTEXT
	  DEFAULT "C:\WINDOWS\system32\shell32.dll,-152"
	  VALUENAME ""
	  END PART
	 END POLICY
	END CATEGORY
 
	CATEGORY "Default Viewer/Icon for CTL File"
	KEYNAME "Software\Classes\.ctl\shell\Open\command"
	 POLICY !!policyctlview
	  EXPLAIN !!explain
	  PART Default
	  EDITTEXT
	  DEFAULT "C:\WINDOWS\system32\NOTEPAD.EXE %1"
	  VALUENAME ""
	  END PART
	 END POLICY
	END CATEGORY
 
END CATEGORY
 
[strings]
category="Zita FAX File Associations"
policyg3nicon="Set Default Icon for G3N File"
policyg3nview="Set default Viewer for G3N File"
policyg3ficon="Set Default Icon for G3N File"
policyg3fview="Set default Viewer for G3N File"
policyctlicon="Set Default Icon for CTL File"
policyctlview="Set default Viewer for CTL File"
explain="This policy sets the default file association for G3N files and it's default icon. Custom Group Policy - TechnoChat.IN ! By Saugata Datta."

Group Policy Fig -1

Group Policy Fig -2

EnjoY

Disable Print Screen Function Via VBS Script (By using GPO Startup/Shutdown Script)

Saugata — Wed, 08 Oct 2008 12:48:13 +0000

Another requirement, now customer need to disable default windows Print Screen function on all of their user desktop,

So, we started our searching again, and easily we able to find out how to disable print screen on windows by importing following registry.

^?View Code REG

1
2
3

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Keyboard Layout]
"Scancode Map"=hex:00,00,00,00,00,00,00,00,03,00,00,00,00,00,37,e0,00,00,54,00,\
00,00,00,00

So, again we start working to create a custom adm file. As because this is a HKLM key, so we need Privilege to import it into registry, and only way to do so is to apply some policy via Computer Configuration, whit which we can force policy on each computer not on individual user.

But suddenly we discover that ADM files don't support reg_binary values, so we have to find out any other alternatives.

Now we have to create tow .VBS file, one for to disable print screen and another for to re-enable print screen,

VBS Script for disable print screen,

^?View Code VB

'Disable Print Screen Function
const HKEY_LOCAL_MACHINE = &H80000002
strKeyPath = "SYSTEM\ControlSet001\Control\Keyboard Layout"
strComputer = "."
BinaryValueName = "Scancode Map"
iValues = Array(&H00,&H00,&H00,&H00,&H00,&H00,&H00,&H00,&H03,&H00,&H00,&H00,&H00,&H00,&H37,&He0,&H00,&H00,&H54,&H00,&H00,&H00,&H00,&H00)
Set oReg=GetObject("winmgmts:{impersonationLevel=impersonate}!\\" & strComputer & "\root\default:StdRegProv")
disablePS = oReg.SetBinaryValue(HKEY_LOCAL_MACHINE,strKeyPath,BinaryValueName,iValues)

VBS Script for re-enable print screen

^?View Code VB

'Re-Enable Print Screen Function
const HKEY_LOCAL_MACHINE = &H80000002
strKeyPath = "SYSTEM\ControlSet001\Control\Keyboard Layout"
strComputer = "." 
strStringValueName = "Scancode Map"
set objReg = GetObject("winmgmts:\\" & strComputer & "\root\default:StdRegProv")
enablePS = objReg.DeleteValue(HKEY_LOCAL_MACHINE,strKeyPath,strStringValueName)

Now we can easily implement above two script via GPO by using system Startup/Shutdown script.

Thanks..

OS Dependent Logoff/Logon Script run via GPO

Saugata — Mon, 06 Oct 2008 17:22:04 +0000

Use following VBS script Startup or Shutdown script.

^?View Code VB

Option Explicit
Dim objItem, colItems, objWMIService, strComputer, objShell
strComputer = "."
Set objShell = CreateObject("WScript.Shell")
Set objWMIService = GetObject("winmgmts:\\" & strComputer & "\root\cimv2")
Set colItems = objWMIService.ExecQuery("Select * from Win32_OperatingSystem",,48)
For Each objItem in colItems
                If InStr(objItem.Caption,"2000") Then
                                'Add your line here for 2000
                                objShell.Run "regedit", 1, True
                End If
    		If InStr(LCase(objItem.Caption),Lcase("XP")) Then
                                'Add your command line here for 2000
                                objShell.Run "calc", 1, True
                End If
		If InStr(LCase(objItem.Caption),Lcase("2003")) Then
                                'Add your command line here for 2000
                                objShell.Run "notepad", 1, True
                End If
Next

with above script, on Windows 2000 it will execute regedit.exe, on Windows XP it will execute calc.exe, and on Windows 2003 it will execute notepad.exe.

You can change the file as you wish..