This commit is contained in:
Manuel Romero
2020-12-15 11:21:21 +01:00
parent 3ab85cf54a
commit e026ef0dd2
4 changed files with 17 additions and 20 deletions

View File

@@ -142,8 +142,10 @@ resource "null_resource" "post-win-common" {
}
inline = [
"powershell.exe -File C:/provision/win-common/disable-ie-sec.ps1",
"powershell.exe -File C:/provision/win-common/resize-disk-tomax.ps1",
"powershell.exe -File C:/provision/win-common/chrome-install.ps1",
"powershell.exe -File C:/provision/win-common/vscode-install.ps1"
"powershell.exe -File C:/provision/win-common/vscode-install.ps1",
]
}

View File

@@ -16,7 +16,3 @@ secedit /export /cfg c:\secpol.cfg | Out-Null
(Get-Content C:\secpol.cfg).replace("PasswordComplexity = 1", "PasswordComplexity = 0") | Out-File C:\secpol.cfg | Out-Null
secedit /configure /db c:\windows\security\local.sdb /cfg c:\secpol.cfg /areas SECURITYPOLICY | Out-Null
rm -force c:\secpol.cfg -confirm:$false | Out-Null
Write-Host "Resize Partition C to max size"
$size = Get-PartitionSupportedSize -DriveLetter C
Resize-Partition -DriveLetter C -Size $size.SizeMax | Out-Null

View File

@@ -0,0 +1,13 @@
# Disable Internet Explorer Enhanced Security
function Disable-InternetExplorerESC {
$AdminKey = "HKLM:\SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A7-37EF-4b3f-8CFC-4F3A74704073}"
$UserKey = "HKLM:\SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A8-37EF-4b3f-8CFC-4F3A74704073}"
Set-ItemProperty -Path $AdminKey -Name "IsInstalled" -Value 0 -Force
Set-ItemProperty -Path $UserKey -Name "IsInstalled" -Value 0 -Force
Rundll32 iesetup.dll, IEHardenLMSettings
Rundll32 iesetup.dll, IEHardenUser
Rundll32 iesetup.dll, IEHardenAdmin
Write-Host "IE Enhanced Security Configuration (ESC) has been disabled."
}
Disable-InternetExplorerESC

View File

@@ -1,16 +1,2 @@
Write-Host "--- Install OneDrive"
choco install onedrive --version 20.201.1005.0009 --no-progress --cache C:\Provision --params "ALLUSERS=1" -y
# Disable Internet Explorer Enhanced Security
function Disable-InternetExplorerESC {
$AdminKey = "HKLM:\SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A7-37EF-4b3f-8CFC-4F3A74704073}"
$UserKey = "HKLM:\SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A8-37EF-4b3f-8CFC-4F3A74704073}"
Set-ItemProperty -Path $AdminKey -Name "IsInstalled" -Value 0 -Force
Set-ItemProperty -Path $UserKey -Name "IsInstalled" -Value 0 -Force
Rundll32 iesetup.dll, IEHardenLMSettings
Rundll32 iesetup.dll, IEHardenUser
Rundll32 iesetup.dll, IEHardenAdmin
Write-Host "IE Enhanced Security Configuration (ESC) has been disabled."
}
Disable-InternetExplorerESC
choco install onedrive --version 20.201.1005.0009 --no-progress --cache C:\Provision --params "ALLUSERS=1" -y