Comments on: Lockdown Windows 2003 & XP with Simple Scripts http://www.edgeblog.net/2007/lockdown-windows-2003-xp-with-simple-scripts/ Notes from the edge Mon, 06 Sep 2010 03:17:23 -0400 http://wordpress.org/?v=abc hourly 1 By: bill http://www.edgeblog.net/2007/lockdown-windows-2003-xp-with-simple-scripts/comment-page-1/#comment-133295 bill Wed, 09 Jun 2010 17:54:43 +0000 http://www.edgeblog.net/2007/lockdown-windows-2003-xp-with-simple-scripts/#comment-133295 Kris, SC will execute against remote hosts via a secure RPC call. It will pass whatever credentials are used to run it, so if you are a domain admin, it will execute on the remote host with your creds. In the script, I am using nested loops for /f %%a in (hosts.txt) do call :serviceconfig %%a goto :eom :serviceconfig for /f %%b in (services.txt) do (sc \\%1 config %%b start= disabled) The first loop passes the variable %%a to the call to :serviceconfig. :serviceconfig receives that variable and shoves it into the variable %1. If you passed it 2 variables, the first would be %1 and the second would be %2. The value of %%a is read from a file hosts.txt, which is just a list of fully qualified domain names for the target machines. When the sub-routine :serviceconfig completes, it returns back to the 1st loop and we read the second value in hosts.txt and repeat the process. I hope this helps. -B Kris,

SC will execute against remote hosts via a secure RPC call. It will pass whatever credentials are used to run it, so if you are a domain admin, it will execute on the remote host with your creds. In the script, I am using nested loops

for /f %%a in (hosts.txt) do call :serviceconfig %%a
goto :eom
:serviceconfig
for /f %%b in (services.txt) do (sc \\%1 config %%b start= disabled)

The first loop passes the variable %%a to the call to :serviceconfig. :serviceconfig receives that variable and shoves it into the variable %1. If you passed it 2 variables, the first would be %1 and the second would be %2. The value of %%a is read from a file hosts.txt, which is just a list of fully qualified domain names for the target machines. When the sub-routine :serviceconfig completes, it returns back to the 1st loop and we read the second value in hosts.txt and repeat the process.

I hope this helps.

-B

]]> By: Kris http://www.edgeblog.net/2007/lockdown-windows-2003-xp-with-simple-scripts/comment-page-1/#comment-133291 Kris Wed, 09 Jun 2010 13:08:07 +0000 http://www.edgeblog.net/2007/lockdown-windows-2003-xp-with-simple-scripts/#comment-133291 Thanks for the script Bill. I don't have a lot of experience with this, therefore I don't understand how this can be executed on remote servers. Don't I need something like psexec? And to specify the remote host, you use \\%1, but where does this variable come from? I hope you have a minute to help me out here. Many thanks in advance! Thanks for the script Bill. I don’t have a lot of experience with this, therefore I don’t understand how this can be executed on remote servers. Don’t I need something like psexec? And to specify the remote host, you use \\%1, but where does this variable come from? I hope you have a minute to help me out here.
Many thanks in advance!

]]> By: Stan http://www.edgeblog.net/2007/lockdown-windows-2003-xp-with-simple-scripts/comment-page-1/#comment-118423 Stan Mon, 08 Feb 2010 11:35:47 +0000 http://www.edgeblog.net/2007/lockdown-windows-2003-xp-with-simple-scripts/#comment-118423 Thanks! Very usefull article. I'm going to add modifications to suite my needs and post it on my blog => http://blog.omotech.com Thanks! Very usefull article. I’m going to add modifications to suite my needs and post it on my blog => http://blog.omotech.com

]]> By: Inyou Crash http://www.edgeblog.net/2007/lockdown-windows-2003-xp-with-simple-scripts/comment-page-1/#comment-7751 Inyou Crash Thu, 12 Apr 2007 13:56:24 +0000 http://www.edgeblog.net/2007/lockdown-windows-2003-xp-with-simple-scripts/#comment-7751 Thanks for the Tips. I plan on using modified versions of this script. Windows Media Player 11 has a particularly nasty little service that seems to devour resources. wmpnetwk.exe is the little bugger, and now with my new script, I have pushed this out to the network and hope to utilize netware for distribution. Thanks for the Tips. I plan on using modified versions of this script.

Windows Media Player 11 has a particularly nasty little service that seems to devour resources. wmpnetwk.exe is the little bugger, and now with my new script, I have pushed this out to the network and hope to utilize netware for distribution.

]]>