Set regional options using script

tzutil /s "Central European Standard Time"
xcopy pl.xml c:\windows
control.exe intl.cpl,,/f:"c:\windows\pl.xml"

And pl.xml contains:


   
         
   
     
       
   
   
 
       
       
   

  

Disable Windows 7 features for hardening

DismRemoveFeatures.bat which contains:

dism /online /disable-feature /featurename:TabletPCOC /NoRestart

dism /online /disable-feature /featurename:MediaPlayback /NoRestart

dism /online /disable-feature /featurename:WindowsMediaPlayer /NoRestart

dism /online /disable-feature /featurename:MediaCenter /NoRestart

dism /online /disable-feature /featurename:OpticalMediaDisc /NoRestart

dism /online /disable-feature /featurename:SearchEngine-Client-Package /norestart

dism /online /disable-feature /featurename:Printing-XPSServices-Features /norestart

dism /online /disable-feature /featurename:Internet-Explorer-Optional-x86 /norestart

dism /online /disable-feature /featurename:Internet-Explorer-Optional-amd64 /norestart

dism /online /disable-feature /featurename:Xps-Foundation-Xps-Viewer /norestart

Dispal help desk number in system properties

cscript Helpdesk.wsf which contains:

           

Set black wallpaper

wallpaper.bat which contains:

xcopy black.bmp c:\windows\web\wallpaper\

regedit /s wallpaper.reg

wallpaper.reg contains:

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Control Panel\Desktop]

"Wallpaper"="c:\\windows\\web\\wallpaper\\black.bmp"

And black.bmp is one black pixel image

Remove Default Application from Windows

takeown /F "C:\Program Files\Windows NT\Accessories\wordpad.exe"
echo y| cacls "C:\Program Files\Windows NT\Accessories\wordpad.exe" /G administrator:F
del "C:\Program Files\Windows NT\Accessories\wordpad.exe" /Q /F

Disable some devices in Device manager using script - devcon

devcon.bat which contains:

if /i "%PROCESSOR_ARCHITECTURE%" EQU "x86" (

    xcopy .\i386\devcon.exe c:\windows\system32 /Y

    start /b /wait devcon.exe disable IDE\CDROM*

    start /b /wait devcon.exe disable HDAudio*

    start /b /wait devcon.exe disable ACPI\PNP0501\0

    goto Done

)

if /i "%PROCESSOR_ARCHITECTURE%" EQU "AMD64" (

    xcopy .\amd64\devcon.exe c:\windows\system32 /Y

    start /b /wait devcon.exe disable IDE\CDROM*

    start /b /wait devcon.exe disable HDAudio*

    start /b /wait devcon.exe disable ACPI\PNP0501\0

    goto Done

)

:Done

timeout 5

Sql Express 2008 R2 x64 silent install

SQLEXPR_x64_ENU.EXE /ConfigurationFile=\Options\ConfigurationFile.ini

Content of ConfigurationFile.ini

;SQLSERVER2008 Configuration File

[SQLSERVER2008]

IACCEPTSQLSERVERLICENSETERMS=1

; Specify the Instance ID for the SQL Server features you have specified. SQL Server directory structure, registry structure, and service names will reflect the instance ID of the SQL Server instance. 

INSTANCEID="MultiTrans"

; Specifies a Setup work flow, like INSTALL, UNINSTALL, or UPGRADE. This is a required parameter. 

ACTION="Install"

; Specifies features to install, uninstall, or upgrade. The list of top-level features include SQL, AS, RS, IS, and Tools. The SQL feature will install the database engine, replication, and full-text. The Tools feature will install Management Tools, Books online, Business Intelligence Development Studio, and other shared components. 

FEATURES=SQLENGINE,REPLICATION,SNAC_SDK

; Displays the command line parameters usage 

HELP="False"

; Specifies that the detailed Setup log should be piped to the console. 

INDICATEPROGRESS="True"

; Setup will not display any user interface. 

QUIET="False"

; Setup will display progress only without any user interaction. 

QUIETSIMPLE="True"

; Specifies that Setup should install into WOW64. This command line argument is not supported on an IA64 or a 32-bit system. 

X86="False"

; Detailed help for command line argument ROLE has not been defined yet. 

ROLE="AllFeatures_WithDefaults"

; Detailed help for command line argument ENU has not been defined yet. 

ENU="True"

; The directory for the extracted service pack files used to update the setup media. 

;PCUSOURCE="c:\7141bc839566ce454173\PCUSOURCE"

; Parameter that controls the user interface behavior. Valid values are Normal for the full UI, and AutoAdvance for a simplied UI. 

; UIMODE="Normal"

; Specify if errors can be reported to Microsoft to improve future SQL Server releases. Specify 1 or True to enable and 0 or False to disable this feature. 

ERRORREPORTING="False"

; Specify the root installation directory for native shared components. 

INSTALLSHAREDDIR="C:\Program Files\Microsoft SQL Server"

; Specify the root installation directory for the WOW64 shared components. 

INSTALLSHAREDWOWDIR="C:\Program Files (x86)\Microsoft SQL Server"

; Specify the installation directory. 

INSTANCEDIR="C:\Program Files\Microsoft SQL Server"

; Specify that SQL Server feature usage data can be collected and sent to Microsoft. Specify 1 or True to enable and 0 or False to disable this feature. 

SQMREPORTING="False"

; Specify a default or named instance. MSSQLSERVER is the default instance for non-Express editions and SQLExpress for Express editions. This parameter is required when installing the SQL Server Database Engine (SQL), Analysis Services (AS), or Reporting Services (RS). 

INSTANCENAME="MULTITRANS"

; Agent account name 

AGTSVCACCOUNT="NT AUTHORITY\NETWORK SERVICE"

; Auto-start service after installation.  

AGTSVCSTARTUPTYPE="Disabled"

; Startup type for Integration Services. 

ISSVCSTARTUPTYPE="Automatic"

; Account for Integration Services: Domain\User or system account. 

ISSVCACCOUNT="NT AUTHORITY\NetworkService"

; Controls the service startup type setting after the service has been created. 

ASSVCSTARTUPTYPE="Automatic"

; The collation to be used by Analysis Services. 

ASCOLLATION="Latin1_General_CI_AS"

; The location for the Analysis Services data files. 

ASDATADIR="Data"

; The location for the Analysis Services log files. 

ASLOGDIR="Log"

; The location for the Analysis Services backup files. 

ASBACKUPDIR="Backup"

; The location for the Analysis Services temporary files. 

ASTEMPDIR="Temp"

; The location for the Analysis Services configuration files. 

ASCONFIGDIR="Config"

; Specifies whether or not the MSOLAP provider is allowed to run in process. 

ASPROVIDERMSOLAP="1"

; A port number used to connect to the SharePoint Central Administration web application. 

FARMADMINPORT="0"

; Startup type for the SQL Server service. 

SQLSVCSTARTUPTYPE="Automatic"

; Level to enable FILESTREAM feature at (0, 1, 2 or 3). 

FILESTREAMLEVEL="0"

; Set to "1" to enable RANU for SQL Server Express. 

ENABLERANU="True"

; Specifies a Windows collation or an SQL collation to use for the Database Engine. 

SQLCOLLATION="SQL_Latin1_General_CP1_CI_AS"

; Account for SQL Server service: Domain\User or system account. 

SQLSVCACCOUNT="NT AUTHORITY\NETWORK SERVICE"

; Windows account(s) to provision as SQL Server system administrators. 

;SQLSYSADMINACCOUNTS="%computername%\admin"

; Provision current user as a Database Engine system administrator for SQL Server 2008 R2 Express. 

ADDCURRENTUSERASSQLADMIN="True"

; Specify 0 to disable or 1 to enable the TCP/IP protocol. 

TCPENABLED="0"

; Specify 0 to disable or 1 to enable the Named Pipes protocol. 

NPENABLED="0"

; Startup type for Browser Service. 

BROWSERSVCSTARTUPTYPE="Disabled"

; Specifies which account the report server NT service should execute under.  When omitted or when the value is empty string, the default built-in account for the current operating system.

; The username part of RSSVCACCOUNT is a maximum of 20 characters long and

; The domain part of RSSVCACCOUNT is a maximum of 254 characters long. 

RSSVCACCOUNT="NT AUTHORITY\NETWORK SERVICE"

; Specifies how the startup mode of the report server NT service.  When 

; Manual - Service startup is manual mode (default).

; Automatic - Service startup is automatic mode.

; Disabled - Service is disabled 

RSSVCSTARTUPTYPE="Automatic"

; Specifies which mode report server is installed in.  

; Default value: “FilesOnly”  

RSINSTALLMODE="FilesOnlyMode"

Sql Express 2008 R2 x86 silent install

SQLEXPR32_x86_ENU.EXE /ConfigurationFile=\Options\ConfigurationFile.ini

Content of ConfigurationFile.ini

;SQLSERVER2008 Configuration File

[SQLSERVER2008]

IACCEPTSQLSERVERLICENSETERMS=1

; Specify the Instance ID for the SQL Server features you have specified. SQL Server directory structure, registry structure, and service names will reflect the instance ID of the SQL Server instance. 

INSTANCEID="MultiTrans"

; Specifies a Setup work flow, like INSTALL, UNINSTALL, or UPGRADE. This is a required parameter. 

ACTION="Install"

; Specifies features to install, uninstall, or upgrade. The list of top-level features include SQL, AS, RS, IS, and Tools. The SQL feature will install the database engine, replication, and full-text. The Tools feature will install Management Tools, Books online, Business Intelligence Development Studio, and other shared components. 

FEATURES=SQLENGINE,REPLICATION,SNAC_SDK

; Displays the command line parameters usage 

HELP="False"

; Specifies that the detailed Setup log should be piped to the console. 

INDICATEPROGRESS="True"

; Setup will not display any user interface. 

QUIET="False"

; Setup will display progress only without any user interaction. 

QUIETSIMPLE="True"

; Specifies that Setup should install into WOW64. This command line argument is not supported on an IA64 or a 32-bit system. 

X86="False"

; Detailed help for command line argument ROLE has not been defined yet. 

ROLE="AllFeatures_WithDefaults"

; Detailed help for command line argument ENU has not been defined yet. 

ENU="True"

; The directory for the extracted service pack files used to update the setup media. 

;PCUSOURCE="c:\75e047c441d47d38861e82d486c1\PCUSOURCE"

; Parameter that controls the user interface behavior. Valid values are Normal for the full UI, and AutoAdvance for a simplied UI. 

;UIMODE="Normal"

; Specify if errors can be reported to Microsoft to improve future SQL Server releases. Specify 1 or True to enable and 0 or False to disable this feature. 

ERRORREPORTING="False"

; Specify the root installation directory for native shared components. 

INSTALLSHAREDDIR="C:\Program Files\Microsoft SQL Server"

; Specify the installation directory. 

INSTANCEDIR="C:\Program Files\Microsoft SQL Server"

; Specify that SQL Server feature usage data can be collected and sent to Microsoft. Specify 1 or True to enable and 0 or False to disable this feature. 

SQMREPORTING="False"

; Specify a default or named instance. MSSQLSERVER is the default instance for non-Express editions and SQLExpress for Express editions. This parameter is required when installing the SQL Server Database Engine (SQL), Analysis Services (AS), or Reporting Services (RS). 

INSTANCENAME="MULTITRANS"

; Agent account name 

AGTSVCACCOUNT="NT AUTHORITY\NETWORK SERVICE"

; Auto-start service after installation.  

AGTSVCSTARTUPTYPE="Disabled"

; Startup type for Integration Services. 

ISSVCSTARTUPTYPE="Automatic"

; Account for Integration Services: Domain\User or system account. 

ISSVCACCOUNT="NT AUTHORITY\NetworkService"

; Controls the service startup type setting after the service has been created. 

ASSVCSTARTUPTYPE="Automatic"

; The collation to be used by Analysis Services. 

ASCOLLATION="Latin1_General_CI_AS"

; The location for the Analysis Services data files. 

ASDATADIR="Data"

; The location for the Analysis Services log files. 

ASLOGDIR="Log"

; The location for the Analysis Services backup files. 

ASBACKUPDIR="Backup"

; The location for the Analysis Services temporary files. 

ASTEMPDIR="Temp"

; The location for the Analysis Services configuration files. 

ASCONFIGDIR="Config"

; Specifies whether or not the MSOLAP provider is allowed to run in process. 

ASPROVIDERMSOLAP="1"

; A port number used to connect to the SharePoint Central Administration web application. 

FARMADMINPORT="0"

; Startup type for the SQL Server service. 

SQLSVCSTARTUPTYPE="Automatic"

; Level to enable FILESTREAM feature at (0, 1, 2 or 3). 

FILESTREAMLEVEL="0"

; Set to "1" to enable RANU for SQL Server Express. 

ENABLERANU="True"

; Specifies a Windows collation or an SQL collation to use for the Database Engine. 

SQLCOLLATION="SQL_Latin1_General_CP1_CI_AS"

; Account for SQL Server service: Domain\User or system account. 

SQLSVCACCOUNT="NT AUTHORITY\NETWORK SERVICE"

; Windows account(s) to provision as SQL Server system administrators. 

;SQLSYSADMINACCOUNTS="MININT-GD3RQAC\admin"

; Provision current user as a Database Engine system administrator for SQL Server 2008 R2 Express. 

ADDCURRENTUSERASSQLADMIN="True"

; Specify 0 to disable or 1 to enable the TCP/IP protocol. 

TCPENABLED="0"

; Specify 0 to disable or 1 to enable the Named Pipes protocol. 

NPENABLED="0"

; Startup type for Browser Service. 

BROWSERSVCSTARTUPTYPE="Disabled"

; Specifies which account the report server NT service should execute under.  When omitted or when the value is empty string, the default built-in account for the current operating system.

; The username part of RSSVCACCOUNT is a maximum of 20 characters long and

; The domain part of RSSVCACCOUNT is a maximum of 254 characters long. 

RSSVCACCOUNT="NT AUTHORITY\NETWORK SERVICE"

; Specifies how the startup mode of the report server NT service.  When 

; Manual - Service startup is manual mode (default).

; Automatic - Service startup is automatic mode.

; Disabled - Service is disabled 

RSSVCSTARTUPTYPE="Automatic"

; Specifies which mode report server is installed in.  

; Default value: “FilesOnly”  

RSINSTALLMODE="FilesOnlyMode"

Rename Administator Account using wmi

RenameAdministatorAccount

wmic useraccount where name='Administrator' call rename name='admin'

Unpin shortcuts from Taskbar

Place this script in "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup"

Script:

On Error Resume Next

Set objShell = CreateObject("Shell.Application")

Set objFSO = CreateObject("Scripting.FileSystemObject")

Set strLNKFilePath =  objShell.NameSpace("C:\Options\GoogleChrome\32")

           

            strLnkFile = strLNKFilePath.Self.Path & "\Gmail.lnk"

           

            Set GmailItems = strLNKFilePath.Items()

           

            For Each Item in GmailItems

                        If (Item.Name = "Gmail") Then

                                   For Each Verb in Item.Verbs

                                               If (Verb.Name = "Unpin from Tas&kbar") Then       Verb.DoIt

                                   Next

                        End If

            Next

Repair boot manager

bootrec /fixmbr