diff --git a/Políticas/Mantenimiento.cmd b/Políticas/Mantenimiento.cmd index a232a62..49b4804 100644 --- a/Políticas/Mantenimiento.cmd +++ b/Políticas/Mantenimiento.cmd @@ -1,55 +1,68 @@ +@echo off +setlocal +echo ========================================== +echo Aplicando configuración institucional... +echo ========================================== + +:: ============================ +:: CARGAR HIVE NTUSER.DAT COMO default_profile +:: ============================ +echo 🔄 Montando hive NTUSER.DAT... +reg load "HKU\default_profile" "C:\Users\Default\NTUSER.DAT" +if %errorlevel% neq 0 ( + echo ❌ Error cargando NTUSER.DAT. ¿Ya está montado o no tienes permisos? + goto :EOF +) + :: ========================================================= :: TECLADO :: ========================================================= - reg add "HKU\default_profile\Control Panel\Keyboard" /v InitialKeyboardIndicators /t REG_DWORD /d 2 /f +reg add "HKCU\Control Panel\Keyboard" /v InitialKeyboardIndicators /t REG_DWORD /d 2 /f :: ========================================================= :: SEGURIDAD Y CONTROL DE USUARIO :: ========================================================= - -:: Desactivar almacenamiento de contraseñas en Edge reg add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v PasswordManagerEnabled /t REG_DWORD /d 0 /f - -:: Deshabilitar la ejecución automática de unidades USB reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v NoDriveTypeAutoRun /t REG_DWORD /d 255 /f -:: Ocultar unidad C: en el explorador reg add "HKU\default_profile\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v NoDrives /t REG_DWORD /d 4 /f +reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v NoDrives /t REG_DWORD /d 4 /f -:: Deshabilitar edición del registro por usuarios reg add "HKU\default_profile\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v DisableRegistryTools /t REG_DWORD /d 1 /f +reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v DisableRegistryTools /t REG_DWORD /d 1 /f -:: Ocultar panel de control y configuración reg add "HKU\default_profile\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v NoControlPanel /t REG_DWORD /d 1 /f - +reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v NoControlPanel /t REG_DWORD /d 1 /f :: ========================================================= :: RENDIMIENTO Y MANTENIMIENTO :: ========================================================= - -:: Deshabilitar Windows Tips para nuevos usuarios reg add "HKLM\Software\Policies\Microsoft\Windows\CloudContent" /v DisableSoftLanding /t REG_DWORD /d 1 /f - -:: Deshabilitar servicios de telemetría reg add "HKLM\Software\Policies\Microsoft\Windows\DataCollection" /v AllowTelemetry /t REG_DWORD /d 0 /f -:: Desactivar sugerencias de inicio de apps en el menú inicio reg add "HKU\default_profile\Software\Policies\Microsoft\Windows\Explorer" /v NoStartMenuSuggestions /t REG_DWORD /d 1 /f +reg add "HKCU\Software\Policies\Microsoft\Windows\Explorer" /v NoStartMenuSuggestions /t REG_DWORD /d 1 /f -:: Desactivar reinicio automático después de actualizaciones reg add "HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" /v NoAutoRebootWithLoggedOnUsers /t REG_DWORD /d 1 /f :: ========================================================= :: MANTENER EQUIPOS LIMPIOS Y REINICIADOS :: ========================================================= - -:: Limpiar archivos temporales al cerrar sesión (Disk Cleanup estilo) reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches\Temporary Files" /v StateFlags0001 /t REG_DWORD /d 2 /f - -:: Habilitar borrado automático de perfiles de usuario inactivos tras 30 días reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /v DeleteUserProfilesOlderThan /t REG_DWORD /d 30 /f -:: Establecer tiempo máximo inactivo antes de cerrar sesión (en segundos) reg add "HKU\default_profile\Control Panel\Desktop" /v ScreenSaveTimeOut /t REG_SZ /d 600 /f -reg add "HKU\default_profile\\Control Panel\Desktop" /v ScreenSaverIsSecure /t REG_SZ /d 1 /f +reg add "HKU\default_profile\Control Panel\Desktop" /v ScreenSaverIsSecure /t REG_SZ /d 1 /f + +reg add "HKCU\Control Panel\Desktop" /v ScreenSaveTimeOut /t REG_SZ /d 600 /f +reg add "HKCU\Control Panel\Desktop" /v ScreenSaverIsSecure /t REG_SZ /d 1 /f + +:: ============================ +:: DESMONTAR HIVE +:: ============================ +echo 🔄 Desmontando hive... +reg unload "HKU\default_profile" + +echo ✅ Configuración aplicada a default user y usuario actual. +pause diff --git a/Políticas/Tema.cmd b/Políticas/Tema.cmd index fa92203..e6a1df1 100644 --- a/Políticas/Tema.cmd +++ b/Políticas/Tema.cmd @@ -1,89 +1,118 @@ @echo off +setlocal echo ================================ -echo Configurando tema, fondo y protector de pantalla... +echo Configurando tema, fondo y navegador institucional... echo ================================ +:: ============================ +:: CARGAR HIVE NTUSER.DAT COMO default_profile +:: ============================ +echo 🔄 Montando hive NTUSER.DAT... +reg load "HKU\default_profile" "C:\Users\Default\NTUSER.DAT" +if %errorlevel% neq 0 ( + echo ❌ Error al montar NTUSER.DAT. ¿Ya está cargado o faltan permisos? + goto :EOF +) + :: ============================ :: OCULTAR CONFIGURACIÓN DE PERSONALIZACIÓN :: ============================ -reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop" /v NoChangingWallPaper /t REG_DWORD /d 1 /f -reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v NoThemesTab /t REG_DWORD /d 1 /f -reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v NoControlPanel /t REG_DWORD /d 0 /f -reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v NoPersonalization /t REG_DWORD /d 1 /f - +for %%K in ( + "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop" + "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" +) do ( + reg add %%K /v NoChangingWallPaper /t REG_DWORD /d 1 /f + reg add %%K /v NoThemesTab /t REG_DWORD /d 1 /f + reg add %%K /v NoControlPanel /t REG_DWORD /d 0 /f + reg add %%K /v NoPersonalization /t REG_DWORD /d 1 /f +) :: ============================ -:: OCULTAR LA PÁGINA DE CONFIGURACIÓN DE PANTALLA DE BLOQUEO +:: OCULTAR LA PANTALLA DE BLOQUEO :: ============================ reg add "HKLM\Software\Policies\Microsoft\Windows\Personalization" /v NoLockScreen /t REG_DWORD /d 0 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /v DisableLogonBackgroundImage /t REG_DWORD /d 0 /f - :: ============================ :: DESACTIVAR ANIMACIONES :: ============================ reg add "HKU\default_profile\Control Panel\Desktop\WindowMetrics" /v MinAnimate /t REG_SZ /d 0 /f +reg add "HKCU\Control Panel\Desktop\WindowMetrics" /v MinAnimate /t REG_SZ /d 0 /f :: ============================ -:: Sin Widgets +:: SIN WIDGETS :: ============================ reg add "HKLM\SOFTWARE\Policies\Microsoft\Dsh" /v AllowNewsAndInterests /t REG_DWORD /d 0 /f :: ============================ :: TEMA OSCURO :: ============================ -set KEY_THEME_CUR="HKU\default_profile\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize" -reg add %KEY_THEME_CUR% /v AppsUseLightTheme /t REG_DWORD /d 0 /f -reg add %KEY_THEME_CUR% /v SystemUsesLightTheme /t REG_DWORD /d 0 /f -reg add %KEY_THEME_CUR% /v ColorPrevalence /t REG_DWORD /d 1 /f +set KEY_THEME_DEF="HKU\default_profile\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize" +set KEY_THEME_CUR="HKCU\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize" -:: ============================================ -:: FONDO DE PANTALLA Y PROTECTOR -:: ============================================ -set KEY_DESKTOP="HKU\default_profile\Control Panel\Desktop" -reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Personalization" /v LockScreenImage /t REG_SZ /d "C:\shared\img0.jpg" /f -reg add %KEY_DESKTOP% /v WallPaper /t REG_SZ /d "C:\shared\img0.jpg" /f -reg add %KEY_DESKTOP% /v ScreenSaveActive /t REG_SZ /d 0 /f +for %%K in (%KEY_THEME_DEF% %KEY_THEME_CUR%) do ( + reg add %%K /v AppsUseLightTheme /t REG_DWORD /d 0 /f + reg add %%K /v SystemUsesLightTheme /t REG_DWORD /d 0 /f + reg add %%K /v ColorPrevalence /t REG_DWORD /d 1 /f +) -:: ============================================ -:: EDGE Y NAVEGACIÓN -:: ============================================ -set KEY_EDGE="HKU\default_profile\Software\Policies\Microsoft\Edge" +:: ============================ +:: FONDO Y PROTECTOR +:: ============================ +set IMG_PATH="C:\shared\img0.jpg" -reg add %KEY_EDGE% /v HideFirstRunExperience /t REG_DWORD /d 1 /f -reg add %KEY_EDGE% /v BrowserSignin /t REG_DWORD /d 0 /f -reg add %KEY_EDGE% /v SyncDisabled /t REG_DWORD /d 0 /f -reg add %KEY_EDGE% /v ExtensionInstallBlocklist /t REG_MULTI_SZ /d "*" /f +for %%K in ( + "HKU\default_profile\Control Panel\Desktop" + "HKCU\Control Panel\Desktop" +) do ( + reg add %%K /v WallPaper /t REG_SZ /d %IMG_PATH% /f + reg add %%K /v ScreenSaveActive /t REG_SZ /d 0 /f +) -:: -------------------------------------------- +reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Personalization" /v LockScreenImage /t REG_SZ /d %IMG_PATH% /f -set KEY_EDGE_LOCAL="HKCU\Software\Policies\Microsoft\Edge" +:: ============================ +:: EDGE - PERFIL DEFAULT Y ACTUAL +:: ============================ +set KEY_EDGE_DEF="HKU\default_profile\Software\Policies\Microsoft\Edge" +set KEY_EDGE_CUR="HKCU\Software\Policies\Microsoft\Edge" set PAGE_LOCATION="https://www.google.com" -:: Página de inicio y comportamiento de arranque -reg add %KEY_EDGE_LOCAL% /v HomepageLocation /t REG_SZ /d %PAGE_LOCATION% /f -reg add %KEY_EDGE_LOCAL% /v HomepageIsNewTabPage /t REG_DWORD /d 0 /f -reg add %KEY_EDGE_LOCAL% /v ShowHomeButton /t REG_DWORD /d 1 /f -reg add %KEY_EDGE_LOCAL% /v RestoreOnStartup /t REG_DWORD /d 4 /f -reg add %KEY_EDGE_LOCAL%\RestoreOnStartupURLs /v 1 /t REG_SZ /d %PAGE_LOCATION% /f -:: Configuración de privacidad y seguridad -reg add %KEY_EDGE_LOCAL% /v AddressBarMicrosoftSearchInBingProviderEnabled /t REG_DWORD /d 0 /f -reg add %KEY_EDGE_LOCAL% /v AdsSettingForIntrusiveAdsSites /t REG_DWORD /d 2 /f -reg add %KEY_EDGE_LOCAL% /v ClearCachedImagesAndFilesOnExit /t REG_DWORD /d 1 /f -reg add %KEY_EDGE_LOCAL% /v ConfigureDoNotTrack /t REG_DWORD /d 1 /f -reg add %KEY_EDGE_LOCAL% /v SmartScreenEnabled /t REG_DWORD /d 1 /f -reg add %KEY_EDGE_LOCAL% /v SmartScreenPuaEnabled /t REG_DWORD /d 1 /f -reg add %KEY_EDGE_LOCAL% /v EdgeShoppingAssistantEnabled /t REG_DWORD /d 0 /f +for %%K in (%KEY_EDGE_DEF% %KEY_EDGE_CUR%) do ( + reg add %%K /v HideFirstRunExperience /t REG_DWORD /d 1 /f + reg add %%K /v BrowserSignin /t REG_DWORD /d 0 /f + reg add %%K /v SyncDisabled /t REG_DWORD /d 0 /f + reg add %%K /v ExtensionInstallBlocklist /t REG_MULTI_SZ /d "*" /f + reg add %%K /v HomepageLocation /t REG_SZ /d %PAGE_LOCATION% /f + reg add %%K /v HomepageIsNewTabPage /t REG_DWORD /d 0 /f + reg add %%K /v ShowHomeButton /t REG_DWORD /d 1 /f + reg add %%K /v RestoreOnStartup /t REG_DWORD /d 4 /f + reg add %%K\RestoreOnStartupURLs /v 1 /t REG_SZ /d %PAGE_LOCATION% /f + reg add %%K /v AddressBarMicrosoftSearchInBingProviderEnabled /t REG_DWORD /d 0 /f + reg add %%K /v AdsSettingForIntrusiveAdsSites /t REG_DWORD /d 2 /f + reg add %%K /v ClearCachedImagesAndFilesOnExit /t REG_DWORD /d 1 /f + reg add %%K /v ConfigureDoNotTrack /t REG_DWORD /d 1 /f + reg add %%K /v SmartScreenEnabled /t REG_DWORD /d 1 /f + reg add %%K /v SmartScreenPuaEnabled /t REG_DWORD /d 1 /f + reg add %%K /v EdgeShoppingAssistantEnabled /t REG_DWORD /d 0 /f + reg add %%K /v NewTabPageSetFeedType /t REG_DWORD /d 1 /f + reg add %%K /v DefaultSearchProviderEnabled /t REG_DWORD /d 1 /f + reg add %%K /v DefaultSearchProviderName /t REG_SZ /d "Google" /f + reg add %%K /v DefaultSearchProviderSearchURL /t REG_SZ /d "%PAGE_LOCATION%/search?q={searchTerms}" /f + reg add %%K /v DefaultSearchProviderSuggestURL /t REG_SZ /d "%PAGE_LOCATION%/complete/search?output=chrome&q={searchTerms}" /f +) -:: Página nueva pestaña (feed de contenido) -reg add %KEY_EDGE_LOCAL% /v NewTabPageSetFeedType /t REG_DWORD /d 1 /f - -:: Motor de búsqueda predeterminado (Google) -reg add %KEY_EDGE_LOCAL% /v DefaultSearchProviderEnabled /t REG_DWORD /d 1 /f -reg add %KEY_EDGE_LOCAL% /v DefaultSearchProviderName /t REG_SZ /d "Google" /f -reg add %KEY_EDGE_LOCAL% /v DefaultSearchProviderSearchURL /t REG_SZ /d "%PAGE_LOCATION%/search?q={searchTerms}" /f -reg add %KEY_EDGE_LOCAL% /v DefaultSearchProviderSuggestURL /t REG_SZ /d "%PAGE_LOCATION%/complete/search?output=chrome&q={searchTerms}" /f - -:: Sin Microsoft Store +:: ============================ +:: BLOQUEO MICROSOFT STORE +:: ============================ reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Explorer" /v NoUseStoreOpenWith /t REG_DWORD /d 1 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\WindowsStore" /v RemoveWindowsStore /t REG_DWORD /d 1 /f + +:: ============================ +:: DESMONTAR HIVE +:: ============================ +echo 🔄 Desmontando hive... +reg unload "HKU\default_profile" + +echo ✅ Configuración aplicada a usuario actual y perfil por defecto. +pause diff --git a/ejecutar_politicas.c b/ejecutar_politicas.c new file mode 100644 index 0000000..9a2965c --- /dev/null +++ b/ejecutar_politicas.c @@ -0,0 +1,73 @@ +#include +#include + +void copiarImagen() { + const char* origen = "img0.jpg"; + const char* destinoDir = "C:\\Shared"; + const char* destino = "C:\\Shared\\img0.jpg"; + + DWORD attr = GetFileAttributesA(origen); + if (attr != INVALID_FILE_ATTRIBUTES && !(attr & FILE_ATTRIBUTE_DIRECTORY)) { + printf("🖼️ Copiando imagen institucional a %s...\n", destino); + CreateDirectoryA(destinoDir, NULL); + if (CopyFileA(origen, destino, FALSE)) { + printf("✅ Imagen copiada correctamente.\n"); + } else { + printf("❌ Error al copiar la imagen.\n"); + } + } else { + printf("⚠️ No se encontró \"%s\". Verifica que esté en la misma carpeta que este programa.\n", origen); + } +} + +void ejecutarScripts(const char* extension) { + WIN32_FIND_DATAA findData; + HANDLE hFind; + char patron[MAX_PATH]; + snprintf(patron, MAX_PATH, "Políticas\\*.%s", extension); + + hFind = FindFirstFileA(patron, &findData); + if (hFind == INVALID_HANDLE_VALUE) return; + + do { + char comando[MAX_PATH]; + snprintf(comando, MAX_PATH, "cmd /c Políticas\\%s", findData.cFileName); + printf("----------------------------------------\n"); + printf("▶ Ejecutando: %s\n", findData.cFileName); + system(comando); + } while (FindNextFileA(hFind, &findData)); + + FindClose(hFind); +} + +int main() { + BOOL esAdmin = FALSE; + HANDLE hToken; + TOKEN_ELEVATION elevation; + DWORD size; + + if (OpenProcessToken(GetCurrentProcess(), TOKEN_QUERY, &hToken)) { + if (GetTokenInformation(hToken, TokenElevation, &elevation, sizeof(elevation), &size)) { + esAdmin = elevation.TokenIsElevated; + } + CloseHandle(hToken); + } + + if (!esAdmin) { + printf("🔐 Requiere privilegios de administrador. Elevando...\n"); + ShellExecuteA(NULL, "runas", GetCommandLineA(), NULL, NULL, SW_SHOWNORMAL); + return 0; + } + + printf("================================\n"); + printf("🚀 Ejecutando scripts en carpeta \"Políticas\"\n"); + printf("================================\n\n"); + + copiarImagen(); + ejecutarScripts("cmd"); + ejecutarScripts("bat"); + + printf("\n✅ Todos los scripts han sido ejecutados.\n"); + system("pause"); + return 0; +} diff --git a/img0.jpg b/img0.jpg new file mode 100644 index 0000000..9f0b19f Binary files /dev/null and b/img0.jpg differ