1 @echo off 2 pushd %~dp0 3 set gpfile=temp_gpfile 4 set currentuser=%username% 5 if "%currentuser%" == "" set currentuser=Administrator 6 echo Windows Server To Windows Desktop 7 echo ================================= 8 PowerShell /Command "&{Get-WmiObject -Class Win32_OperatingSystem | Select-Object -ExpandProperty Caption}" 9 echo Current Domain: %USERDOMAIN%10 echo Current User: %currentuser%11 echo.12 set /p tmpInput=Maybe will restart computer. Are you ready? (Y/N):13 if "%tmpInput%"=="y" goto :START14 if "%tmpInput%"=="Y" goto :START15 echo Canelled.16 echo Press any key to exit...17 pause>nul18 goto :END19 :START20 echo (1/3) Config Service21 echo - Automatic Audio Server22 PowerShell /Command "&{Import-Module ServerManager}"23 PowerShell /Command "&{Set-Service "Audiosrv" -StartupType Automatic}"24 echo (2/3) Config Registry and GroupPolicy25 echo - Shutdown without logon26 REG ADD HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v ShutdownWithoutLogon /t REG_DWORD /d 1 /f>nul27 echo - Disable Ctrl+Alt+Del28 REG ADD HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v DisableCAD /t REG_DWORD /d 1 /f>nul29 echo - Disable Shutdown reason On30 REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Reliability" /v ShutdownReasonOn /t REG_DWORD /d 0 /f>nul31 echo - CPU Priority for Program32 REG ADD HKLM\SYSTEM\CurrentControlSet\Control\PriorityControl /v Win32PrioritySeparation /t REG_DWORD /d 38 /f>nul33 echo - IE Security Policy34 REG ADD "HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A7-37EF-4b3f-8CFC-4F3A74704073}" /v IsInstalled /t REG_DWORD /d 0 /f>nul35 REG ADD "HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A8-37EF-4b3f-8CFC-4F3A74704073}" /v IsInstalled /t REG_DWORD /d 0 /f>nul36 Rundll32 iesetup.dll, IEHardenLMSettings37 Rundll32 iesetup.dll, IEHardenUser38 Rundll32 iesetup.dll, IEHardenAdmin39 echo - No autorun Server Manager40 REG ADD HKLM\Software\Microsoft\ServerManager /v DoNotOpenServerManagerAtLogon /t REG_DWORD /d 1 /f>nul41 echo - Disable Password complexity and Minimum password length42 echo [version]>%gpfile%.inf43 echo signature="$CHICAGO$">>%gpfile%.inf44 echo [System Access]>>%gpfile%.inf45 echo MinimumPasswordLength = 0 >>%gpfile%.inf46 echo PasswordComplexity = 0 >>%gpfile%.inf47 secedit /configure /db %gpfile%.sdb /cfg %gpfile%.inf /log %gpfile%.log>nul 2>nul48 del %gpfile%.inf %gpfile%.sdb %gpfile%.log %gpfile%.jfm /f /q49 echo - %currentuser%‘s Password nerver expires50 wmic Path Win32_UserAccount Where Name="%currentuser%" Set PasswordExpires="FALSE">nul51 echo   PasswordExpires List:52 wmic useraccount get Name,PasswordExpires53 echo (3/3) Config Windows Feature54 echo - BitLocker55 echo - Direct-Play56 echo - Wireless-Networking57 echo - qWave58 echo please wait...59 PowerShell /Command "&{Install-WindowsFeature "BitLocker","Direct-Play","Wireless-Networking","qWave" -Restart}"60 echo Completed!61 echo Press any key to exit...62 pause>nul63 :END64 popd