\
| 1 | The IT Gurus that develop and master the power of IT to solve the world’s most pressing challenges |
Tweet
<#
DESCRIPTION
This script will enable bitlocker on the systemdrive and backup the key to Azure AD.
#>
[cmdletbinding()]
param(
[Parameter()]
[ValidateNotNullOrEmpty()]
[string] $OSDrive = $env:SystemDrive
)
[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
#Create directory is not exist
$psdirectory = "$osdrive\Program Files (x86)\Scripts\Bitlocker"
If(!(test-path $psdirectory))
{
New-Item -ItemType Directory -Force -Path $psdirectory
}
#Start session log
Start-Transcript -Path $psdirectory\pslogmainscript.txt -Append
try
{
#Check if bitlocker already have a recoverykey, if it dosent it will enable bitlocker and create new recoverykey
$checkifexist = (Get-BitLockerVolume -MountPoint $OSDrive).KeyProtector | Where-Object {$_.KeyProtectorType -eq 'RecoveryPassword'}
if($checkifexist) {
Write-host "Bitlocker is already enabled and have recoverykey"
}
else{
$bdeProtect = Get-BitLockerVolume $OSDrive | Select-Object -Property VolumeStatus
if ($bdeProtect.VolumeStatus -eq "FullyDecrypted")
{
# Enable Bitlocker using TPM
Enable-BitLocker -MountPoint $OSDrive -TpmProtector -ErrorAction Continue
Enable-BitLocker -MountPoint $OSDrive -RecoveryPasswordProtector
}
}
#Check if we can use BackupToAAD-BitLockerKeyProtector commandlet
$cmdName = "BackupToAAD-BitLockerKeyProtector"
if (Get-Command $cmdName -ErrorAction SilentlyContinue)
{
#BackupToAAD-BitLockerKeyProtector commandlet exists
$BLK = (Get-BitLockerVolume -MountPoint $OSDrive).KeyProtector | Where-Object {$_.KeyProtectorType -eq 'RecoveryPassword'}
if ($BLK.count -gt 1){
Write-Host "There are multiple recovery keys, will backup key number 1 to AzureAD"
$key = $BLK[0]
BackupToAAD-BitLockerKeyProtector -MountPoint $OSDrive -KeyProtectorId $key.KeyProtectorId
}
else {
Write-Host "There are only one recovery key, will start to backup to AzureAD"
BackupToAAD-BitLockerKeyProtector -MountPoint $OSDrive -KeyProtectorId $BLK.KeyProtectorId
}
}
else{
# BackupToAAD-BitLockerKeyProtector commandlet not available, using other mechanisme
# Get the AAD Machine Certificate
$cert = Get-ChildItem Cert:\LocalMachine\My\ | Where-Object { $_.Issuer -match "CN=MS-Organization-Access" }
# Obtain the AAD Device ID from the certificate
$id = $cert.Subject.Replace("CN=","")
# Get the tenant name from the registry
$tenant = (Get-ItemProperty HKLM:\SYSTEM\CurrentControlSet\Control\CloudDomain Join\JoinInfo\$($id)).UserEmail.Split('@')[1]
# Generate the body to send to AAD containing the recovery information
# Get the BitLocker key information from WMI
(Get-BitLockerVolume -MountPoint $OSDrive).KeyProtector| Where-Object {$_.KeyProtectorType -eq 'RecoveryPassword'} | ForEach-Object{
$key = $_
write-verbose "kid : $($key.KeyProtectorId) key: $($key.RecoveryPassword)"
$body = "{""key"":""$($key.RecoveryPassword)"",""kid"":""$ ($key.KeyProtectorId.replace('{','').Replace('}',' '))"",""vol"":""OSV""}"
# Create the URL to post the data to based on the tenant and device information
$url = "https://enterpriseregistration.windows.net/manage/$tenant/device/$($id)?api-version=1.0"
# Post the data to the URL and sign it with the AAD Machine Certificate
$req = Invoke-WebRequest -Uri $url -Body $body -UseBasicParsing -Method Post -UseDefaultCredentials -Certificate $cert
$req.RawContent
}
}
#>
} catch
{
write-error "Error while setting up AAD Bitlocker, make sure that you are AAD joined and are running the cmdlet as an admin: $_"
}
Stop-Transcript
echo Copying Montserrat font family to system font folder xcopy %~dp0Montserrat\*.otf "%SystemRoot%\Fonts" /V /C /I /F /Y echo Importing Montserrat font family information to the registry. reg import "%~dp0Montserrat_FontFamily.reg"
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Fonts] "Montserrat Bold (TrueType)"="Montserrat-Bold.otf" "Montserrat Bold Italic (TrueType)"="Montserrat-BoldItalic.otf" "Montserrat Italic (TrueType)"="Montserrat-Italic.otf" "Montserrat Light (TrueType)"="Montserrat-Light.otf" "Montserrat Light Italic (TrueType)"="Montserrat-LightItalic.otf" "Montserrat Medium (TrueType)"="Montserrat-Medium.otf" "Montserrat Medium Italic (TrueType)"="Montserrat-MediumItalic.otf" "Montserrat Regular (TrueType)"="Montserrat-Regular.otf" [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\ Windows NT\CurrentVersion\Fonts] "Montserrat Bold (TrueType)"="Montserrat-Bold.otf" "Montserrat Bold Italic (TrueType)"="Montserrat-BoldItalic.otf" "Montserrat Italic (TrueType)"="Montserrat-Italic.otf" "Montserrat Light (TrueType)"="Montserrat-Light.otf" "Montserrat Light Italic (TrueType)"="Montserrat-LightItalic.otf" "Montserrat Medium (TrueType)"="Montserrat-Medium.otf" "Montserrat Medium Italic (TrueType)"="Montserrat-MediumItalic.otf" "Montserrat Regular (TrueType)"="Montserrat-Regular.otf"
Batch Script
#To define a particular parameter, replace the 'parameterName' inside itsm.getParameter('variableName') with that parameter's name
BAT=r'''
taskill /f /im app.exe
cd c:\App && app.exe
'''
import os
import sys
import platform
import subprocess
import ctypes
class disable_file_system_redirection:
_disable = ctypes.windll.kernel32.Wow64DisableWow64FsRedirect ion
_revert = ctypes.windll.kernel32.Wow64RevertWow64FsRedirecti on
def __enter__(self):
self.old_value = ctypes.c_long()
self.success = self._disable(ctypes.byref(self.old_value))
def __exit__(self, type, value, traceback):
if self.success:
self._revert(self.old_value)
path=os.environ['programdata']+"\Sample.bat"
with open(path,"w") as f:
f.write(BAT)
try:
with disable_file_system_redirection():
print "Excuting Bat File"
process = subprocess.Popen([path],stdout=subprocess.PIPE)
stdout = process.communicate()[0]
print "---------------------------"
print stdout
except:
print "Excuting Bat File"
process = subprocess.Popen([path],stdout=subprocess.PIPE)
stdout = process.communicate()[0]
print "---------------------------"
print stdout
if os.path.exists(path):
try:
os.remove(path)
except:
pass
Download files
url=r'https://example.conf/font.txt' #Provide the website url which you need to install as a font
fileName='free3of9.ttf' # Provide the filename of the font
import os
import ssl
import urllib2
import shutil
import ctypes
ssl._create_default_https_context = ssl._create_unverified_context
temp=os.environ['PROGRAMDATA']+r'\c1_temp'
if not os.path.exists(temp):
os.makedirs(temp)
vbs=r'''
Set objShellApp = CreateObject("Shell.Application")
Set objFSO = CreateObject("Scripting.FileSystemObject")
Const FONTS = &H14&
Set objFolder = objShellApp.Namespace(FONTS)
strNewFontsFolder = "%s"
If objFSO.FolderExists(strNewFontsFolder) = True Then
For Each objFile In objFSO.GetFolder(strNewFontsFolder).Files
If LCase(right(objFile,4)) = ".ttf" OR LCase(right(objFile,4)) = ".otf" Then
If objFSO.FileExists(objFolder.Self.Path & "\" & objFile.Name) = False Then objFolder.CopyHere objFile.Path
Wscript.Echo "Installed " & objFile.Name
End If
Next
Else
Wscript.Echo "Unable to find " & strWindowsFonts
End If
'''
def Download(temp,url):
fp = os.path.join(temp, fileName)
request = urllib2.Request(url, headers={'User-Agent' : "Magic Browser"})
parsed = urllib2.urlopen(request)
if os.path.exists(temp):
pass
if not os.path.exists(temp):
os.makedirs(temp)
with open(fp, 'wb') as f:
while True:
chunk=parsed.read(100*1000*1000)
if chunk:
f.write(chunk)
else:
break
return fp
Fontpath=Download(temp,url)
class disable_file_system_redirection:
_disable = ctypes.windll.kernel32.Wow64DisableWow64FsRedirect ion
_revert = ctypes.windll.kernel32.Wow64RevertWow64FsRedirecti on
def __enter__(self):
self.old_value = ctypes.c_long()
self.success = self._disable(ctypes.byref(self.old_value))
def __exit__(self, type, value, traceback):
if self.success:
self._revert(self.old_value)
def runvbs(vbs,Fontpath):
if not os.path.isdir(temp):
os.mkdir(workdir)
vbs_script= vbs % (temp)
with open(temp+r'\temprun.vbs',"w") as f :
f.write(vbs_script)
with disable_file_system_redirection():
print os.popen('cscript.exe "'+temp+r'\temprun.vbs"').read()
print('Script execution completed successfully')
if os.path.isfile(temp+r'\temprun.vbs'):
os.remove(temp+r'\temprun.vbs')
try:
shutil.rmtree(temp)
except:
pass
runvbs(vbs,Fontpath)
DownTo='C:\Updates' ## Here mention the path where the application to download
fromURL='https://example.com/file.exe' ## Here mention the download Link
import ctypes
class disable_file_system_redirection:
_disable = ctypes.windll.kernel32.Wow64DisableWow64FsRedirect ion
_revert = ctypes.windll.kernel32.Wow64RevertWow64FsRedirecti on
def __enter__(self):
self.old_value = ctypes.c_long()
self.success = self._disable(ctypes.byref(self.old_value))
def __exit__(self, type, value, traceback):
if self.success:
self._revert(self.old_value)
import subprocess
with disable_file_system_redirection():
import urllib
import os
#Download File
def downloadFile(DownTo, fromURL):
try:
fileName = fromURL.split('/')[-1]
DownTo = os.path.join(DownTo, fileName)
with open(DownTo, 'wb') as f:
f.write(urllib.urlopen(fromURL).read())
if os.path.isfile(DownTo):
return '{} - {}KB'.format(DownTo, os.path.getsize(DownTo)/1000)
except:
return 'Please Check URL or Download Path!'
if __name__=='__main__':
print downloadFile(DownTo, fromURL )
#Run File
out=os.popen('C:\FilePathHere\App.exe').read();
print(out);
Comment