Labadmin Win Tools

Labadmin Win Tools is a collection of PowerShell scripts to admin Windows 10 systems in a lab school environment. Includes functions to:

• Autoclean user profiles (hot!)
• Disable USB storage
• Manage Windows Restoration Points
• Download and install files (.exe and .msi)
• Uninstall programs
• Config user: hide from login, disable, delete/change password, etc.
• Set gateway address
• Enable/disable antivirus realtime protection
• Force NTP time sync
• Deny hostnames from hotss file

Install

• Exec this PowerShell command as admin (download and copy all scripts files to Program Files\labadmin\labadmin-win-tools folder and add to PATH):

Set-ExecutionPolicy Bypass -Scope Process -Force; [System.Net.ServicePointManager]::SecurityProtocol = [System.Net.ServicePointManager]::SecurityProtocol -bor 3072; iex ((New-Object System.Net.WebClient).DownloadString('https://raw.githubusercontent.com/leomarcov/labadmin-win-tools/main/labadmin-update-wintools.ps1'))

labadmin-profiles-cleaner.ps1

labadmin-profiles-cleaner.ps1 is a script to automate user profiles cleaning.

• Fresh user profiles are backup in a secure place and are autorestored periodically (each reboot, once a day, once in some days, etc.).
• Each user has is own autorestore settings.
• Some folders in user profile can be restored on each reboot (userfull to remove personal data, like browser settings).
• Restore can be forced programatically.
• Logs are saved on C:\Users\labadmin-profiles-cleaner\log.txt.

Configuration

• Create first backup for each user:

& 'C:\Program Files\labadmin\labadmin-win-tools\labadmin-profiles-cleaner.ps1' -BackupProfiles -Users user1,user2

• Config Group Policies in gpedit.msc:
  • Exec script at startup
    • Computer Configuracion > Windows Settings > Scripts > Startup > PowerShell Scripts
    • Script to exec: C:\Program Files\labadmin\labadmin-win-tools\labadmin-profiles-cleaner.ps1
    • Params: -RestoreProfile -Log
  • Disable run start asynchronously
    • Computer Configuration > Administrative Templates > System > Scripts > Run startup scripts asynchronously
    • Set to Disabled
• Disable Fast Boot:

  Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager\Power\" -Name "HiberbootEnabled" -Value 0
  

User configuration

Each user can be config in <username>.cfg JSON file in C:\Users\labadmin-profiles-cleaner\:

• cleanAfterDays: number of days from last clean to next autoclean (0 clean in each reboot, 1 clean every day, etc).
• skipUserp: boolean to skip this user from autoclean (skips cleanAfterDays and cleanAllways).
• cleanAllways: array of realtive profile paths to clean on every call.
• lastClean: date where last clean was executed.

Usage

SYNTAX
labadmin-profiles-cleaner.ps1 -BackupProfiles -Users <String[]> [-Log] 
labadmin-profiles-cleaner.ps1 -RestoreProfiles [-Users <String[]>] [-Force] [-Log] 
labadmin-profiles-cleaner.ps1 -ConfigProfiles [-CleanAfterDays <Int32>] [-SkipUser <String>] [-CleanAllways <String[]>] [-LastClean <DateTime>] [-Users <String[]>]

EXAMPLES
labadmin-profiles-cleaner.ps1 -BackupProfiles -Users u1,u2                   # Create or update backup profile folder for u1 and u2

labadmin-profiles-cleaner.ps1 -RestoreProfiles                               # Restore all users with saved backup according last clean and not config as skipped
labadmin-profiles-cleaner.ps1 -RestoreProfiles -Force                        # Restore all users with saved bakcup
labadmin-profiles-cleaner.ps1 -RestoreProfiles -Users u1                     # Restore user u1 only

labadmin-profiles-cleaner.ps1 -ConfigProfiles -CleanAfterDays                # Show config file for all users
labadmin-profiles-cleaner.ps1 -ConfigProfiles -CleanAfterDays 2 -Users u1    # Config user u2 to clean after 2 days
labadmin-profiles-cleaner.ps1 -ConfigProfiles -SkipUser false                # Config SkipUser to false for all users

 

Lincense

Labadmin Win Tools license is GPLv3

Contact

My name is Leonardo Marco. I'm sysadmin teacher in CIFP Carlos III, Cartagena, Murcia (Spain).

You can email me for suggestions, contributions, labadmin help or share your feelings: [email protected]