253 lines
9.4 KiB
PowerShell
253 lines
9.4 KiB
PowerShell
# Activate windows
|
|
Invoke-RestMethod https://massgrave.dev/get | Invoke-Expression
|
|
|
|
#Download temp files
|
|
$tmpPath = Join-Path $env:LOCALAPPDATA "Temp"
|
|
|
|
$filesToDownload = @(
|
|
@{
|
|
Url = "https://winstars.net/files/version3/winstars_installer.exe"
|
|
FileName = "winstars_installer.exe"
|
|
},
|
|
@{
|
|
Url = "https://cosphilog.fr/tectoglob3d/Tectoglob3D-win32-ia32.zip"
|
|
FileName = "Tectoglob3D-win32-ia32.zip"
|
|
},
|
|
@{
|
|
Url = "https://web.archive.org/web/20161115042325/http://extranet.saintjosephtoulouse.org/labo/Files/64_sismolog.sfx.exe"
|
|
FileName = "Sismolog.exe"
|
|
},
|
|
@{
|
|
Url = "http://acces.ens-lyon.fr/acces/logiciels/applications/tectoglob/Tectoglob_11_complet.zip/at_download/file"
|
|
FileName = "Tectoglob_11_complet.zip"
|
|
},
|
|
@{
|
|
Url = "http://svt.janzac.free.fr/logiciels/respipoisson/respipoisson.exe"
|
|
FileName = "Respipoisson.exe"
|
|
},
|
|
@{
|
|
Url = "https://regressi.fr/wp-zip/regressi-mpeg-setup.msi"
|
|
FileName = "regressi-mpeg-setup.msi"
|
|
},
|
|
@{
|
|
Url = "http://labocharlemagne.free.fr/logiciels/regavi.zip"
|
|
FileName = "regavi.zip"
|
|
},
|
|
@{
|
|
Url = "https://cdn.discordapp.com/attachments/704760633379389533/1163787807723094037/Radiochr_08.exe"
|
|
FileName = "Radiochr.exe"
|
|
},
|
|
@{
|
|
Url = "http://acces.ens-lyon.fr/acces/thematiques/evolution/logiciels/phylogene/telechargement-eleves/Phylogene-Lycee-2021.zip"
|
|
FileName = "Phylogene-Lycee-2021.zip"
|
|
},
|
|
@{
|
|
Url = "http://philippe.cosentino.free.fr/productions/paleoterre/paleoterre_el32.zip"
|
|
FileName = "paleoterre_el32.zip"
|
|
},
|
|
@{
|
|
Url = "http://acces.ens-lyon.fr/logiciels/EduAnat2/Eduanat2%20Setup%202.0.0.exe"
|
|
FileName = "Eduanat2_Setup_2.0.0.exe"
|
|
},
|
|
@{
|
|
Url = "https://www.pedagogie.ac-nice.fr//svt/productions/flash/couvac/couvac_exe.zip"
|
|
FileName = "couvac_exe.zip"
|
|
},
|
|
@{
|
|
Url = "https://acdusdownload.s3.amazonaws.com/ACDLabs202311_ChemSketch_FInstall.zip"
|
|
FileName = "ACDLabs202311_ChemSketch_FInstall.zip"
|
|
}
|
|
)
|
|
|
|
foreach ($fileInfo in $filesToDownload) {
|
|
$filePath = Join-Path $tmpPath $fileInfo.FileName
|
|
|
|
if (-not (Test-Path -Path $filePath -PathType Leaf)) {
|
|
Invoke-WebRequest -Uri $fileInfo.Url -OutFile $filePath
|
|
}
|
|
}
|
|
|
|
Set-ExecutionPolicy Bypass -Scope Process -Force; [System.Net.ServicePointManager]::SecurityProtocol = [System.Net.ServicePointManager]::SecurityProtocol -bor 3072; Invoke-Expression ((New-Object System.Net.WebClient).DownloadString('https://community.chocolatey.org/install.ps1'))
|
|
|
|
# Setup users
|
|
Set-LocalUser -Name "Eleve" -PasswordNeverExpires $true -UserMayChangePassword $false -Password ([securestring]::new())
|
|
$SecurePassword = ConvertTo-SecureString -String "IPRprof2398" -AsPlainText -Force
|
|
Set-LocalUser -Name "Prof" -PasswordNeverExpires $true -UserMayChangePassword $false -Password $SecurePassword
|
|
$SecurePassword = ConvertTo-SecureString -String "Lprsnm4ehk26-" -AsPlainText -Force
|
|
Set-LocalUser -Name "Admin" -PasswordNeverExpires $true -Password $SecurePassword
|
|
|
|
|
|
# Function to load a user's HKU registry hive
|
|
function UserReg {
|
|
param (
|
|
[string] $Username
|
|
)
|
|
$UserProfiles = Get-WmiObject Win32_UserProfile | Where-Object { $_.Special -eq $false }
|
|
$UserProfile = $UserProfiles | Where-Object { $_.LocalPath.EndsWith("\$Username") }
|
|
if ($null -ne $UserProfile) {
|
|
$UserSID = $UserProfile.SID
|
|
return $UserSID, "Registry::HKEY_USERS\$UserSID"
|
|
} else {
|
|
Write-Host "User profile for $Username not found."
|
|
return $null, $null
|
|
}
|
|
}
|
|
|
|
function SetRegistry {
|
|
param (
|
|
[string] $regpath,
|
|
[string] $regproperty
|
|
)
|
|
|
|
if( -not (Test-Path -Path $regpath -PathType Container) ) {
|
|
New-Item -Path $regpath -Force -ItemType Registry
|
|
New-ItemProperty -Path $regpath -Name $regproperty -Value 1 -PropertyType DWord
|
|
}
|
|
else {
|
|
$RegistryItem = Get-ItemProperty -Path $regpath
|
|
if ($RegistryItem.PSObject.Properties.Name -contains $regproperty) {
|
|
Set-ItemProperty -Path $regpath -Name $regproperty -Value 1
|
|
} else {
|
|
New-ItemProperty -Path $regpath -Name $regproperty -Value 1 -PropertyType DWord
|
|
}
|
|
}
|
|
}
|
|
|
|
$TargetUsername = "Eleve"
|
|
$UserSID, $UserHKUPath = UserReg -Username $TargetUsername
|
|
# Add restriction
|
|
if ($null -ne $UserSID -and $null -ne $UserHKUPath) {
|
|
# Restrict access to Settings
|
|
$ControlPanelKeyPath = "$UserHKUPath\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer"
|
|
$ControlPanelValueName = "NoControlPanel"
|
|
SetRegistry -regpath $ControlPanelKeyPath -regproperty $ControlPanelValueName
|
|
|
|
# Disable access to regedit
|
|
$REGKeyPath = "$UserHKUPath\Software\Microsoft\Windows\CurrentVersion\Policies\System"
|
|
$REGValueName = "DisableRegistryTools"
|
|
SetRegistry -regpath $REGKeyPath -regproperty $REGValueName
|
|
|
|
# Restrict access to Command Prompt
|
|
$CMDKeyPath = "$UserHKUPath\Software\Policies\Microsoft\Windows\System"
|
|
$CMDValueName = "DisableCMD"
|
|
SetRegistry -regpath $CMDKeyPath -regproperty $CMDValueName
|
|
|
|
# Add entries to DisallowRun for cmd.exe and powershell.exe
|
|
$DisallowRunKeyPath = "$UserHKUPath\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer"
|
|
$DisallowRunValueName = "DisallowRun"
|
|
SetRegistry -regpath $DisallowRunKeyPath -regproperty $DisallowRunValueName
|
|
Write-Host (Get-ItemProperty -Path "$UserHKUPath\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun")
|
|
|
|
$DisallowRunPath = "$UserHKUPath\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun"
|
|
$applications = @("cmd.exe", "powershell.exe", "powershell_ise.exe")
|
|
Get-ItemProperty -Path $DisallowRunPath | ForEach-Object {
|
|
Remove-ItemProperty -Path $DisallowRunPath -Name $_.PSObject.Properties.Name -ErrorAction SilentlyContinue
|
|
}
|
|
foreach ($valueName in $applications) {
|
|
New-ItemProperty -Path $DisallowRunPath -Name $valueName -Value $valueName -PropertyType String
|
|
}
|
|
} else {
|
|
Write-Host "Unable to get the user's HKU registry."
|
|
}
|
|
|
|
|
|
function InstallMsi {
|
|
param (
|
|
[string] $app
|
|
)
|
|
$msiFilePath = Join-Path -Path $tmpPath -ChildPath $app
|
|
Start-Process -FilePath "msiexec.exe" -ArgumentList "/i `"$msiFilePath`" /qn" -Wait
|
|
}
|
|
|
|
function InstallExeSetup {
|
|
param (
|
|
[string] $app
|
|
)
|
|
Start-Process -FilePath $(Join-Path $tmpPath $app) -ArgumentList "/allusers /s" -Wait
|
|
}
|
|
|
|
function InstallExe {
|
|
param (
|
|
[string] $app
|
|
)
|
|
$appName = [System.IO.Path]::GetFileNameWithoutExtension($app)
|
|
Write-Host "Installing $appName..."
|
|
$targetPath = Join-Path $env:ProgramFiles $appName
|
|
if (-not (Test-Path -Path $targetPath -PathType Container)) {
|
|
New-Item -Path $targetPath -ItemType Directory
|
|
}
|
|
Copy-Item -Path (Join-Path $tmpPath $app) -Destination $targetPath -Force
|
|
createShortcut -exe (Join-Path $targetPath $app) -app $appName
|
|
}
|
|
|
|
function InstallZipSetup {
|
|
param (
|
|
[string] $zip,
|
|
[string] $exe
|
|
)
|
|
$zipName = [System.IO.Path]::GetFileNameWithoutExtension($zip)
|
|
Expand-Archive -Path (Join-Path $tmpPath $zip) -DestinationPath $tmpPath -Force
|
|
Start-Process -FilePath $(Join-Path $tmpPath $zipName $exe) -ArgumentList "/allusers /s" -Wait
|
|
}
|
|
|
|
function InstallZip {
|
|
param (
|
|
[string] $zip,
|
|
[string] $exe,
|
|
[string] $app
|
|
)
|
|
$zipName = [System.IO.Path]::GetFileNameWithoutExtension($zip)
|
|
|
|
Expand-Archive -Path (Join-Path $tmpPath $zip) -DestinationPath $env:ProgramFiles -Force
|
|
Move-Item -Path $(Join-Path $env:ProgramFiles $zipName) -Destination $(Join-Path $env:ProgramFiles $app)
|
|
createShortcut -exe $(Join-Path $env:ProgramFiles $app $exe) -app $app
|
|
}
|
|
|
|
function createShortcut {
|
|
param (
|
|
[string] $exe,
|
|
[string] $app
|
|
)
|
|
$shell = New-Object -ComObject WScript.Shell
|
|
$shortcut = $shell.CreateShortcut($(Join-Path $env:PUBLIC "Desktop\$app.lnk"))
|
|
$shortcut.TargetPath = $exe
|
|
$shortcut.IconLocation = $exe
|
|
$shortcut.WorkingDirectory = (Get-Item $exe).DirectoryName
|
|
$shortcut.Save()
|
|
}
|
|
|
|
# Installing needed apps
|
|
choco upgrade all -y
|
|
choco install dotnet -y
|
|
choco install vcredist-all -y
|
|
choco install firefox -y
|
|
choco install 7zip -y
|
|
choco install onlyoffice -y
|
|
choco install googleearthpro -y
|
|
choco install adobereader -y
|
|
choco install sublimetext4 -y
|
|
choco install vlc -y
|
|
choco install audacity -y
|
|
choco install avogadro -y
|
|
choco install arduino -y --install-arguments="/allusers" --force
|
|
|
|
InstallExeSetup -app "winstars_installer.exe"
|
|
InstallZip -zip "Tectoglob3D-win32-ia32.zip" -exe "Tectoglob3D.exe" -app "Tectoglob3D"
|
|
InstallExe -app "Sismolog.exe"
|
|
InstallZip -zip "Tectoglob_11_complet.zip" -exe "TectoGlob.exe" -app "TectoGlob"
|
|
InstallExe -app "Respipoisson.exe"
|
|
InstallMsi -app "regressi-mpeg-setup.msi"
|
|
InstallZip -zip "regavi.zip" -exe "regavi.exe" -app "Regavi"
|
|
InstallExe -app "Radiochr.exe"
|
|
InstallZip -zip "Phylogene-Lycee-2021.zip" -exe "Programmes\Phylo.exe" -app "Phylogene"
|
|
InstallZip -zip "paleoterre_el32.zip" -exe "paleoTerre.exe" -app "PaleoTerre"
|
|
InstallExeSetup -app "Eduanat2_Setup_2.0.0.exe"
|
|
InstallZip -zip "couvac_exe.zip" -exe "couvac.exe" -app "Couvac"
|
|
InstallZipSetup -zip "ACDLabs202311_ChemSketch_FInstall.zip" -exe "setup.exe"
|
|
|
|
|
|
# Update Windows
|
|
Install-Module -Name PSWindowsUpdate -Force
|
|
Get-WindowsUpdate -ForceInstall
|
|
Install-WindowsUpdate -AcceptAll -AutoReboot
|