56 lines
5.2 KiB
Batchfile
56 lines
5.2 KiB
Batchfile
@echo off
|
|
echo Installation des outils en cours
|
|
rem Activation Bureau a distance
|
|
reg add "hklm\system\currentControlSet\Control\Terminal Server" /v "AllowTSConnections" /t REG_DWORD /d 0x1 /f >nul 2>&1
|
|
reg add "hklm\system\currentControlSet\Control\Terminal Server" /v "fDenyTSConnections" /t REG_DWORD /d 0x0 /f >nul 2>&1
|
|
sc config TermService start= auto >nul 2>&1
|
|
net start Termservice >nul 2>&1
|
|
netsh.exe advfirewall firewall add rule name="Bureau a distance (TCP)" dir=in action=allow description="Autorisation du RDP [TCP 3389]" enable=yes profile=private,domain,public localport=3389 protocol=tcp >nul 2>&1
|
|
netsh.exe advfirewall firewall add rule name="Bureau a distance (UDP)" dir=in action=allow description="Autorisation du RDP [UDP 3389]" enable=yes profile=private,domain,public localport=3389 protocol=udp >nul 2>&1
|
|
rem Installation de kwartz-auth
|
|
@echo off
|
|
rem Installation de kwartz-auth si pas present dans le netlogon
|
|
if %kwartzauth%==false (
|
|
copy /Y %Deployroot%\Scripts\ScriptRegion\outilsregion\kwartz-auth.exe c:\windows\system32
|
|
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "kwartz-auth" /t REG_SZ /d "kwartz-auth.exe" /f
|
|
netsh advfirewall firewall add rule name="kwartz-auth.exe" dir=in action=allow program="c:\windows\system32\kwartz-auth.exe" enable=yes
|
|
)
|
|
rem Configuration WSUS
|
|
reg add "hklm\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate" /f >nul 2>&1
|
|
reg add "hklm\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate" /v "ElevateNonAdmins" /t REG_DWORD /d 0x1 /f >nul 2>&1
|
|
reg add "hklm\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate" /v "DisableWindowsUpdateAccess" /t REG_DWORD /d 0x1 /f >nul 2>&1
|
|
reg add "hklm\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate" /v "AcceptTrustedPublisherCerts" /t REG_DWORD /d 0x1 /f >nul 2>&1
|
|
reg add "hklm\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate" /v "TargetGroup" /t REG_SZ /d LYC-%id% /f >nul 2>&1
|
|
reg add "hklm\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate" /v "TargetGroupEnabled" /t REG_DWORD /d 0x1 /f >nul 2>&1
|
|
reg add "hklm\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate" /v "WUServer" /t REG_SZ /d "http://l%rne%-dss:8530" /f >nul 2>&1
|
|
reg add "hklm\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate" /v "WUStatusServer" /t REG_SZ /d "http://l%rne%-dss:8530" /f >nul 2>&1
|
|
reg add "hklm\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate\AU" /f >nul 2>&1
|
|
reg add "hklm\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate\AU" /v "UseWUServer" /t REG_DWORD /d 0x1 /f >nul 2>&1
|
|
reg add "hklm\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate\AU" /v "NoAutoUpdate" /t REG_DWORD /d 0x0 /f >nul 2>&1
|
|
reg add "hklm\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate\AU" /v "DetectionFrequencyEnabled" /t REG_DWORD /d 0x1 /f >nul 2>&1
|
|
reg add "hklm\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate\AU" /v "DetectionFrequency" /t REG_DWORD /d 0x2 /f >nul 2>&1
|
|
reg add "hklm\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate\AU" /v "RebootRelaunchTimeoutEnabled" /t REG_DWORD /d 0x0 /f >nul 2>&1
|
|
reg add "hklm\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate\AU" /v "RebootRelaunchTimeout" /t REG_DWORD /d 0x1 /f >nul 2>&1
|
|
reg add "hklm\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate\AU" /v "AutoInstallMinorUpdates" /t REG_DWORD /d 0x1 /f >nul 2>&1
|
|
reg add "hklm\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate\AU" /v "NoAutoRebootWithLoggedOnUsers" /t REG_DWORD /d 0x1 /f >nul 2>&1
|
|
reg add "hklm\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate\AU" /v "AUOptions" /t REG_DWORD /d 0x4 /f >nul 2>&1
|
|
reg add "hklm\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate\AU" /v "ScheduledInstallDay" /t REG_DWORD /d 0x0 /f >nul 2>&1
|
|
reg add "hklm\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate\AU" /v "ScheduledInstallTime" /t REG_DWORD /d 0xc /f >nul 2>&1
|
|
reg add "hklm\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate\AU" /v "RebootWarningTimeoutEnabled" /t REG_DWORD /d 0x1 /f >nul 2>&1
|
|
reg add "hklm\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate\AU" /v "RebootWarningTimeout" /t REG_DWORD /d 0x1 /f >nul 2>&1
|
|
reg add "hklm\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate\AU" /v "RescheduleWaitTimeEnabled" /t REG_DWORD /d 0x0 /f >nul 2>&1
|
|
reg add "hklm\SOFTWARE\Policies\Microsoft\windows\WindowsUpdate\AU" /v "RescheduleWaitTime" /t REG_DWORD /d 0x1 /f >nul 2>&1
|
|
sc config wuauserv start= auto >nul
|
|
net start wuauserv >nul
|
|
rem Installation Wapt
|
|
start "" /wait %Deployroot%\Scripts\ScriptRegion\outilsregion\waptagent.exe /VERYSILENT
|
|
copy /Y %Deployroot%\Scripts\ScriptRegion\outilsregion\wapt-get.ini c:\wapt > nul
|
|
ping 127.0.0.1 -n 10 > nul
|
|
c:\wapt\wapt-get.exe setup-tasks
|
|
copy /Y "%Deployroot%\Scripts\ScriptRegion\outilsregion\Bibliotheque de logiciels.url" c:\users\public\desktop > nul
|
|
CheckNetIsolation LoopbackExempt -a -n="Microsoft.MicrosoftEdge_8wekyb3d8bbwe" > nul
|
|
rem Installation Fusion inventory
|
|
start /wait %Deployroot%\Scripts\ScriptRegion\outilsregion\fusion\fusioninventory-agent_windows-x64_2.4.1 /acceptlicense /debug=0 /execmode=Service /httpd /httpd-trust='127.0.0.1/32' /installtype=from-scratch /runnow /tag=%rne% /task-frequency=Daily /add-firewall-exception /proxy='http://%kwartz%:3128' /S /server='https://%kwartz%:443/glpi/plugins/fusioninventory' /no-ssl-check
|
|
rem Clé publique Nomachine
|
|
copy /Y %Deployroot%\Scripts\ScriptRegion\outilsregion\authorized.crt c:\users\administrateur\.nx\config
|
|
exit |