diff --git a/AdminGroups.csv b/AdminGroups.csv new file mode 100644 index 0000000..6b06897 --- /dev/null +++ b/AdminGroups.csv @@ -0,0 +1,21 @@ +Name,samAccountName,GroupCategory,GroupScope,DisplayName,OU,Description,Membership +Tier 0 PAW Users,Tier0PAWUsers,Security,Global,Tier 0 PAW Users,"OU=Groups,OU=Tier0,OU=Admin",Members of this group are permitted to log onto Tier0 Privileged Access Workstations using normal accounts, +Tier 0 PAW Maintenance,Tier0PAWMaint,Security,Global,Tier 0 PAW Maintenance,"OU=Groups,OU=Tier0,OU=Admin",Members of this group maintain and support Tier0 Privileged Access Workstations, +Tier 0 Replication Maintenance,Tier0ReplicationMaintenance,Security,Global,Tier 0 Replication Maintenance,"OU=Groups,OU=Tier0,OU=Admin",Members of this group are Tier 0 Replication Maintenance, +Tier 0 Servers,Tier0Servers,Security,Global,Tier 0 Servers,"OU=Groups,OU=Tier0,OU=Admin",Group that contain all Tier 0 servers, +Tier 0 Sync Servers,Tier0SyncServers,Security,Global,Tier 0 Sync Servers,"OU=Groups,OU=Tier0,OU=Admin",Group that contain all Tier 0 synchronisation servers, +Tier 0 Physical Access,Tier0PhysicalAccess,Security,Global,Tier 0 PhysicalAccess,"OU=Groups,OU=Tier0,OU=Admin",Group that contain users allowed to access physical domain controller, +Tier 0 Physical DC,Tier0PhysicalDC,Security,Global,Tier 0 PhysicalDC,"OU=Groups,OU=Tier0,OU=Admin",Group that contain physical domain controller computer object, +Tier 0 Service Accounts,Tier0serviceaccounts,Security,Global,Tier 0 Service Accounts,"OU=Groups,OU=Tier0,OU=Admin",Group that contain all Tier 0 svc accouts, +Tier 0 PAW Computers,Tier0PAWComputers,Security,Global,Tier 0 PAW Computers,"OU=Groups,OU=Tier0,OU=Admin",Group with members of the tier 0 devices servers and domaincontrollers, +Tier 1 Admins,tier1admins,Security,Global,Tier 1 Admins,"OU=Groups,OU=Tier1,OU=Admin",Members of this group are Tier 1 Administrators, +Tier 1 Server Maintenance,Tier1ServerMaintenance,Security,Global,Tier 1 Server Maintenance,"OU=Groups,OU=Tier1,OU=Admin",Members of this group perform Tier 1 Server Maintenance, +Tier 1 PAW Users,Tier1PAWUsers,Security,Global,Tier 1 PAW Users,"OU=Groups,OU=Tier1,OU=Admin",Members of this group are permitted to log onto Tier1 Privileged Access Workstations using normal accounts, +Tier 1 PAW Computers,Tier1PAWComputers,Security,Global,Tier 1 PAW Computers,"OU=Groups,OU=Tier1,OU=Admin",Group with members of the Tier 1 devices and servers, +Tier 1 PAW Maintenance,Tier1PAWMaint,Security,Global,Tier1 PAW Maintenance,"OU=Groups,OU=Tier1,OU=Admin",Members of this group maintain and support Tier0 Privileged Access Workstations, +Tier 1 Servers,Tier1Servers,Security,Global,Tier 1 Servers,"OU=Groups,OU=Tier1,OU=Admin",Group that contain all Tier 1 servers, +Tier 1 Service Accounts,Tier1serviceaccounts,Security,Global,Tier 1serviceaccounts,"OU=Groups,OU=Tier1,OU=Admin",Group that contain all Tier 1 svc accouts, +Tier 2 Admins,tier2admins,Security,Global,Tier 2 Admins,"OU=Groups,OU=Tier2,OU=Admin",Members of this group are Tier 2 Administrators, +Tier 2 Service Desk Operators,Tier2ServiceDeskOperators,Security,Global,Tier 2 Service Desk Operators,"OU=Groups,OU=Tier2,OU=Admin",Members of this group are Service Desk Operators, +Tier 2 Workstation Maintenance,Tier2WorkstationMaintenance,Security,Global,Tier 2 Workstation Maintenance,"OU=Groups,OU=Tier2,OU=Admin",Members of this group perform Workstation Maintenance, +Tier 2 Service Accounts,Tier2serviceaccounts,Security,Global,Tier 2 Service Accounts,"OU=Groups,OU=Tier2,OU=Admin",Group that contain all Tier 2 svc accouts, diff --git a/Create-Group.ps1 b/Create-Group.ps1 new file mode 100644 index 0000000..94afb01 --- /dev/null +++ b/Create-Group.ps1 @@ -0,0 +1,40 @@ +<# + .Example + $csv = Read-Host -Prompt "Please provide full path to Groups csv file" + .\Create-Group.ps1 -CSVfile $csv -Verbose + PS C:\Tools> $csv = Read-Host -Prompt "Please provide full path to Groups csv file" + Please provide full path to Groups csv file: c:\tools\groups.csv + PS C:\Tools> .\Create-Group.ps1 -CSVfile $csv -Verbose + VERBOSE: Creating new Group 'Tier0ReplicationMaintenance' under 'OU=Groups,OU=Tier0,OU=Admin,DC=azureblog,DC=pl' + VERBOSE: Creating new Group 'Tier1ServerMaintenance' under 'OU=Groups,OU=Tier1,OU=Admin,DC=azureblog,DC=pl' + VERBOSE: Creating new Group 'ServiceDeskOperators' under 'OU=Groups,OU=Tier2,OU=Admin,DC=azureblog,DC=pl' + VERBOSE: Creating new Group 'WorkstationMaintenance' under 'OU=Groups,OU=Tier2,OU=Admin,DC=azureblog,DC=pl' + VERBOSE: Group 'tier1admins'already exists. + VERBOSE: Group 'tier2admins'already exists. +#> + +[CmdletBinding()] +param( + [string] $CSVfile +) +$dNC = (Get-ADRootDSE).defaultNamingContext +$groups = Import-Csv $CSVfile +foreach ($group in $groups) { + $groupName = $group.Name + $groupOUPrefix = $group.OU + $destOU = $group.OU + "," + $dNC + $groupDN = "CN=" + $groupName + "," + $destOU + $checkForGroup = Get-ADGroup -filter 'Name -eq $groupName' -ErrorAction SilentlyContinue + If ($checkForGroup.count -eq 0 ) { + Write-Verbose "Creating new Group '$($Group.samAccountName)' under '$destOU'" + New-ADGroup -Name $Group.Name -SamAccountName $Group.samAccountName -GroupCategory $Group.GroupCategory -GroupScope $Group.GroupScope -DisplayName $Group.DisplayName -Path $destOU -Description $Group.Description + If ($Group.Membership -ne "") { + Write-Verbose "Adding Group Membership '$($Group.Membership)' for group '$($Group.samAccountName)'" + Add-ADPrincipalGroupMembership -Identity $Group.samAccountName -MemberOf $Group.Membership + } + $error.Clear() + } + Else { + Write-Verbose "Group '$($Group.samAccountName)'already exists." + } +} diff --git a/Create-User.ps1 b/Create-User.ps1 new file mode 100644 index 0000000..d13a76f --- /dev/null +++ b/Create-User.ps1 @@ -0,0 +1,40 @@ +<# + .Example + $csv = Read-Host -Prompt "Please provide full path to Groups csv file" + .\Create-User.ps1 -CSVfile $csv -Password zaq12WSXcde3 -Verbose + +#> + +[CmdletBinding()] +param( + [Parameter(Mandatory=$True)][string] $CSVfile, + [Parameter(Mandatory=$True)][string] $Password +) +$DNSRoot = (Get-ADDomain).DNSRoot +$DSN = (Get-ADDomain).DistinguishedName +$users = Import-Csv $CSVfile +foreach ($user in $users) { + $name = $user.name + $samAccountName = $user.samAccountName + $UserPrincipalName = $samAccountName + '@' + $DNSRoot + $parentOU = $user.ParentOU + ',' + $DSN + $groupMembership = $user.GroupMembership + $enabled = [bool]$user.enabled + $checkForUser = [bool]( Get-ADUSer -Filter {SamAccountname -eq $samaccountname}) + If ($checkForUser -eq $false) { + Write-Verbose "Creating new user '$samAccountName' under '$parentOU'" + New-ADUser -Name $name -Path $ParentOU -SamAccountName $samAccountName -UserPrincipalName $UserPrincipalName -AccountPassword (ConvertTo-SecureString $password -AsPlainText -Force) -ChangePasswordAtLogon $false -Enabled $enabled -EmailAddress $UserPrincipalName + start-sleep -Seconds 5 + if ($groupMembership -ne "") { + $groupMembership = ($user.GroupMembership) -split ',' + foreach ($group in $groupMembership){ + Write-Verbose "Adding User '$samAccountName' to Group '$group'" + Add-ADGroupMember -Identity $group -Members $samAccountName + } + } + $error.Clear() + } + Else { + Write-Verbose "User '$samAccountName' already exists." + } +} diff --git a/GPO Backup/manifest.xml b/GPO Backup/manifest.xml new file mode 100644 index 0000000..dbff4bc --- /dev/null +++ b/GPO Backup/manifest.xml @@ -0,0 +1 @@ + \ No newline at end of file diff --git a/GPO Backup/{1E6B6CED-E567-4E62-84F4-C8322ED42DE6}/Backup.xml b/GPO Backup/{1E6B6CED-E567-4E62-84F4-C8322ED42DE6}/Backup.xml new file mode 100644 index 0000000..75f1138 --- /dev/null +++ b/GPO Backup/{1E6B6CED-E567-4E62-84F4-C8322ED42DE6}/Backup.xml @@ -0,0 +1,20 @@ + + 01 00 04 9c 00 00 00 00 00 00 00 00 00 00 00 00 14 00 00 00 04 00 ec 00 08 00 00 00 05 02 28 00 00 01 00 00 01 00 00 00 8f fd ac ed b3 ff d1 11 b4 1d 00 a0 c9 68 f9 39 01 01 00 00 00 00 00 05 0b 00 00 00 00 00 24 00 ff 00 0f 00 01 05 00 00 00 00 00 05 15 00 00 00 49 a8 35 27 b4 8d fc 70 74 ba 9b 68 00 02 00 00 00 02 24 00 ff 00 0f 00 01 05 00 00 00 00 00 05 15 00 00 00 49 a8 35 27 b4 8d fc 70 74 ba 9b 68 00 02 00 00 00 02 24 00 ff 00 0f 00 01 05 00 00 00 00 00 05 15 00 00 00 49 a8 35 27 b4 8d fc 70 74 ba 9b 68 07 02 00 00 00 02 14 00 94 00 02 00 01 01 00 00 00 00 00 05 09 00 00 00 00 02 14 00 94 00 02 00 01 01 00 00 00 00 00 05 0b 00 00 00 00 02 14 00 ff 00 0f 00 01 01 00 00 00 00 00 05 12 00 00 00 00 0a 14 00 ff 00 0f 00 01 01 00 00 00 00 00 03 00 00 00 00 + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/GPO Backup/{1E6B6CED-E567-4E62-84F4-C8322ED42DE6}/DomainSysvol/GPO/Machine/Preferences/Groups/Groups.xml b/GPO Backup/{1E6B6CED-E567-4E62-84F4-C8322ED42DE6}/DomainSysvol/GPO/Machine/Preferences/Groups/Groups.xml new file mode 100644 index 0000000..bc79d6b --- /dev/null +++ b/GPO Backup/{1E6B6CED-E567-4E62-84F4-C8322ED42DE6}/DomainSysvol/GPO/Machine/Preferences/Groups/Groups.xml @@ -0,0 +1,9 @@ + + + + + + + + + diff --git a/GPO Backup/{1E6B6CED-E567-4E62-84F4-C8322ED42DE6}/DomainSysvol/GPO/Machine/microsoft/windows nt/SecEdit/GptTmpl.inf b/GPO Backup/{1E6B6CED-E567-4E62-84F4-C8322ED42DE6}/DomainSysvol/GPO/Machine/microsoft/windows nt/SecEdit/GptTmpl.inf new file mode 100644 index 0000000..82ed125 Binary files /dev/null and b/GPO Backup/{1E6B6CED-E567-4E62-84F4-C8322ED42DE6}/DomainSysvol/GPO/Machine/microsoft/windows nt/SecEdit/GptTmpl.inf differ diff --git a/GPO Backup/{1E6B6CED-E567-4E62-84F4-C8322ED42DE6}/DomainSysvol/GPO/Machine/registry.pol b/GPO Backup/{1E6B6CED-E567-4E62-84F4-C8322ED42DE6}/DomainSysvol/GPO/Machine/registry.pol new file mode 100644 index 0000000..23a3474 Binary files /dev/null and b/GPO Backup/{1E6B6CED-E567-4E62-84F4-C8322ED42DE6}/DomainSysvol/GPO/Machine/registry.pol differ diff --git a/GPO Backup/{1E6B6CED-E567-4E62-84F4-C8322ED42DE6}/bkupInfo.xml b/GPO Backup/{1E6B6CED-E567-4E62-84F4-C8322ED42DE6}/bkupInfo.xml new file mode 100644 index 0000000..747494c --- /dev/null +++ b/GPO Backup/{1E6B6CED-E567-4E62-84F4-C8322ED42DE6}/bkupInfo.xml @@ -0,0 +1 @@ + diff --git a/GPO Backup/{1E6B6CED-E567-4E62-84F4-C8322ED42DE6}/gpreport.xml b/GPO Backup/{1E6B6CED-E567-4E62-84F4-C8322ED42DE6}/gpreport.xml new file mode 100644 index 0000000..ee8b30c Binary files /dev/null and b/GPO Backup/{1E6B6CED-E567-4E62-84F4-C8322ED42DE6}/gpreport.xml differ diff --git a/GPO Backup/{1EF41186-1E2A-4F8E-A60C-41DC5627A442}/Backup.xml b/GPO Backup/{1EF41186-1E2A-4F8E-A60C-41DC5627A442}/Backup.xml new file mode 100644 index 0000000..dfdd988 --- /dev/null +++ b/GPO Backup/{1EF41186-1E2A-4F8E-A60C-41DC5627A442}/Backup.xml @@ -0,0 +1,20 @@ + + 01 00 04 9c 00 00 00 00 00 00 00 00 00 00 00 00 14 00 00 00 04 00 ec 00 08 00 00 00 05 02 28 00 00 01 00 00 01 00 00 00 8f fd ac ed b3 ff d1 11 b4 1d 00 a0 c9 68 f9 39 01 01 00 00 00 00 00 05 0b 00 00 00 00 00 24 00 ff 00 0f 00 01 05 00 00 00 00 00 05 15 00 00 00 49 a8 35 27 b4 8d fc 70 74 ba 9b 68 00 02 00 00 00 02 24 00 ff 00 0f 00 01 05 00 00 00 00 00 05 15 00 00 00 49 a8 35 27 b4 8d fc 70 74 ba 9b 68 00 02 00 00 00 02 24 00 ff 00 0f 00 01 05 00 00 00 00 00 05 15 00 00 00 49 a8 35 27 b4 8d fc 70 74 ba 9b 68 07 02 00 00 00 02 14 00 94 00 02 00 01 01 00 00 00 00 00 05 09 00 00 00 00 02 14 00 94 00 02 00 01 01 00 00 00 00 00 05 0b 00 00 00 00 02 14 00 ff 00 0f 00 01 01 00 00 00 00 00 05 12 00 00 00 00 0a 14 00 ff 00 0f 00 01 01 00 00 00 00 00 03 00 00 00 00 + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/GPO Backup/{1EF41186-1E2A-4F8E-A60C-41DC5627A442}/DomainSysvol/GPO/Machine/microsoft/windows nt/SecEdit/GptTmpl.inf b/GPO Backup/{1EF41186-1E2A-4F8E-A60C-41DC5627A442}/DomainSysvol/GPO/Machine/microsoft/windows nt/SecEdit/GptTmpl.inf new file mode 100644 index 0000000..16d1675 Binary files /dev/null and b/GPO Backup/{1EF41186-1E2A-4F8E-A60C-41DC5627A442}/DomainSysvol/GPO/Machine/microsoft/windows nt/SecEdit/GptTmpl.inf differ diff --git a/GPO Backup/{1EF41186-1E2A-4F8E-A60C-41DC5627A442}/bkupInfo.xml b/GPO Backup/{1EF41186-1E2A-4F8E-A60C-41DC5627A442}/bkupInfo.xml new file mode 100644 index 0000000..6baa160 --- /dev/null +++ b/GPO Backup/{1EF41186-1E2A-4F8E-A60C-41DC5627A442}/bkupInfo.xml @@ -0,0 +1 @@ + diff --git a/GPO Backup/{1EF41186-1E2A-4F8E-A60C-41DC5627A442}/gpreport.xml b/GPO Backup/{1EF41186-1E2A-4F8E-A60C-41DC5627A442}/gpreport.xml new file mode 100644 index 0000000..79fc954 Binary files /dev/null and b/GPO Backup/{1EF41186-1E2A-4F8E-A60C-41DC5627A442}/gpreport.xml differ diff --git a/GPO Backup/{2BF9F766-27CB-47C5-AEAC-6804D6DECB29}/Backup.xml b/GPO Backup/{2BF9F766-27CB-47C5-AEAC-6804D6DECB29}/Backup.xml new file mode 100644 index 0000000..ffd3ff2 --- /dev/null +++ b/GPO Backup/{2BF9F766-27CB-47C5-AEAC-6804D6DECB29}/Backup.xml @@ -0,0 +1,18 @@ + + 01 00 04 9c 00 00 00 00 00 00 00 00 00 00 00 00 14 00 00 00 04 00 ec 00 08 00 00 00 05 02 28 00 00 01 00 00 01 00 00 00 8f fd ac ed b3 ff d1 11 b4 1d 00 a0 c9 68 f9 39 01 01 00 00 00 00 00 05 0b 00 00 00 00 00 24 00 ff 00 0f 00 01 05 00 00 00 00 00 05 15 00 00 00 49 a8 35 27 b4 8d fc 70 74 ba 9b 68 00 02 00 00 00 02 24 00 ff 00 0f 00 01 05 00 00 00 00 00 05 15 00 00 00 49 a8 35 27 b4 8d fc 70 74 ba 9b 68 00 02 00 00 00 02 24 00 ff 00 0f 00 01 05 00 00 00 00 00 05 15 00 00 00 49 a8 35 27 b4 8d fc 70 74 ba 9b 68 07 02 00 00 00 02 14 00 94 00 02 00 01 01 00 00 00 00 00 05 09 00 00 00 00 02 14 00 94 00 02 00 01 01 00 00 00 00 00 05 0b 00 00 00 00 02 14 00 ff 00 0f 00 01 01 00 00 00 00 00 05 12 00 00 00 00 0a 14 00 ff 00 0f 00 01 01 00 00 00 00 00 03 00 00 00 00 + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/GPO Backup/{2BF9F766-27CB-47C5-AEAC-6804D6DECB29}/DomainSysvol/GPO/User/Preferences/Registry/Registry.xml b/GPO Backup/{2BF9F766-27CB-47C5-AEAC-6804D6DECB29}/DomainSysvol/GPO/User/Preferences/Registry/Registry.xml new file mode 100644 index 0000000..b6a9ae3 --- /dev/null +++ b/GPO Backup/{2BF9F766-27CB-47C5-AEAC-6804D6DECB29}/DomainSysvol/GPO/User/Preferences/Registry/Registry.xml @@ -0,0 +1,4 @@ + + + + diff --git a/GPO Backup/{2BF9F766-27CB-47C5-AEAC-6804D6DECB29}/DomainSysvol/GPO/User/comment.cmtx b/GPO Backup/{2BF9F766-27CB-47C5-AEAC-6804D6DECB29}/DomainSysvol/GPO/User/comment.cmtx new file mode 100644 index 0000000..1e4e4d5 --- /dev/null +++ b/GPO Backup/{2BF9F766-27CB-47C5-AEAC-6804D6DECB29}/DomainSysvol/GPO/User/comment.cmtx @@ -0,0 +1,12 @@ + + + + + + + + + + + + \ No newline at end of file diff --git a/GPO Backup/{2BF9F766-27CB-47C5-AEAC-6804D6DECB29}/DomainSysvol/GPO/User/registry.pol b/GPO Backup/{2BF9F766-27CB-47C5-AEAC-6804D6DECB29}/DomainSysvol/GPO/User/registry.pol new file mode 100644 index 0000000..aac722b Binary files /dev/null and b/GPO Backup/{2BF9F766-27CB-47C5-AEAC-6804D6DECB29}/DomainSysvol/GPO/User/registry.pol differ diff --git a/GPO Backup/{2BF9F766-27CB-47C5-AEAC-6804D6DECB29}/bkupInfo.xml b/GPO Backup/{2BF9F766-27CB-47C5-AEAC-6804D6DECB29}/bkupInfo.xml new file mode 100644 index 0000000..787dedc --- /dev/null +++ b/GPO Backup/{2BF9F766-27CB-47C5-AEAC-6804D6DECB29}/bkupInfo.xml @@ -0,0 +1 @@ + diff --git a/GPO Backup/{2BF9F766-27CB-47C5-AEAC-6804D6DECB29}/gpreport.xml b/GPO Backup/{2BF9F766-27CB-47C5-AEAC-6804D6DECB29}/gpreport.xml new file mode 100644 index 0000000..8bece5d Binary files /dev/null and b/GPO Backup/{2BF9F766-27CB-47C5-AEAC-6804D6DECB29}/gpreport.xml differ diff --git a/GPO Backup/{32565ECB-4024-45FB-AC4C-32D1B7E3DBEA}/Backup.xml b/GPO Backup/{32565ECB-4024-45FB-AC4C-32D1B7E3DBEA}/Backup.xml new file mode 100644 index 0000000..1f745f1 --- /dev/null +++ b/GPO Backup/{32565ECB-4024-45FB-AC4C-32D1B7E3DBEA}/Backup.xml @@ -0,0 +1,20 @@ + + 01 00 04 9c 00 00 00 00 00 00 00 00 00 00 00 00 14 00 00 00 04 00 ec 00 08 00 00 00 05 02 28 00 00 01 00 00 01 00 00 00 8f fd ac ed b3 ff d1 11 b4 1d 00 a0 c9 68 f9 39 01 01 00 00 00 00 00 05 0b 00 00 00 00 00 24 00 ff 00 0f 00 01 05 00 00 00 00 00 05 15 00 00 00 49 a8 35 27 b4 8d fc 70 74 ba 9b 68 00 02 00 00 00 02 24 00 ff 00 0f 00 01 05 00 00 00 00 00 05 15 00 00 00 49 a8 35 27 b4 8d fc 70 74 ba 9b 68 00 02 00 00 00 02 24 00 ff 00 0f 00 01 05 00 00 00 00 00 05 15 00 00 00 49 a8 35 27 b4 8d fc 70 74 ba 9b 68 07 02 00 00 00 02 14 00 94 00 02 00 01 01 00 00 00 00 00 05 09 00 00 00 00 02 14 00 94 00 02 00 01 01 00 00 00 00 00 05 0b 00 00 00 00 02 14 00 ff 00 0f 00 01 01 00 00 00 00 00 05 12 00 00 00 00 0a 14 00 ff 00 0f 00 01 01 00 00 00 00 00 03 00 00 00 00 + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/GPO Backup/{32565ECB-4024-45FB-AC4C-32D1B7E3DBEA}/DomainSysvol/GPO/Machine/microsoft/windows nt/SecEdit/GptTmpl.inf b/GPO Backup/{32565ECB-4024-45FB-AC4C-32D1B7E3DBEA}/DomainSysvol/GPO/Machine/microsoft/windows nt/SecEdit/GptTmpl.inf new file mode 100644 index 0000000..b6cd4f3 Binary files /dev/null and b/GPO Backup/{32565ECB-4024-45FB-AC4C-32D1B7E3DBEA}/DomainSysvol/GPO/Machine/microsoft/windows nt/SecEdit/GptTmpl.inf differ diff --git a/GPO Backup/{32565ECB-4024-45FB-AC4C-32D1B7E3DBEA}/bkupInfo.xml b/GPO Backup/{32565ECB-4024-45FB-AC4C-32D1B7E3DBEA}/bkupInfo.xml new file mode 100644 index 0000000..08d9fd0 --- /dev/null +++ b/GPO Backup/{32565ECB-4024-45FB-AC4C-32D1B7E3DBEA}/bkupInfo.xml @@ -0,0 +1 @@ + diff --git a/GPO Backup/{32565ECB-4024-45FB-AC4C-32D1B7E3DBEA}/gpreport.xml b/GPO Backup/{32565ECB-4024-45FB-AC4C-32D1B7E3DBEA}/gpreport.xml new file mode 100644 index 0000000..81e9f33 Binary files /dev/null and b/GPO Backup/{32565ECB-4024-45FB-AC4C-32D1B7E3DBEA}/gpreport.xml differ diff --git a/GPO Backup/{46966231-C83D-42F6-88B5-0B1EBDBD5DC2}/Backup.xml b/GPO Backup/{46966231-C83D-42F6-88B5-0B1EBDBD5DC2}/Backup.xml new file mode 100644 index 0000000..2beee2d --- /dev/null +++ b/GPO Backup/{46966231-C83D-42F6-88B5-0B1EBDBD5DC2}/Backup.xml @@ -0,0 +1,20 @@ + + 01 00 04 9c 00 00 00 00 00 00 00 00 00 00 00 00 14 00 00 00 04 00 ec 00 08 00 00 00 05 02 28 00 00 01 00 00 01 00 00 00 8f fd ac ed b3 ff d1 11 b4 1d 00 a0 c9 68 f9 39 01 01 00 00 00 00 00 05 0b 00 00 00 00 00 24 00 ff 00 0f 00 01 05 00 00 00 00 00 05 15 00 00 00 49 a8 35 27 b4 8d fc 70 74 ba 9b 68 00 02 00 00 00 02 24 00 ff 00 0f 00 01 05 00 00 00 00 00 05 15 00 00 00 49 a8 35 27 b4 8d fc 70 74 ba 9b 68 00 02 00 00 00 02 24 00 ff 00 0f 00 01 05 00 00 00 00 00 05 15 00 00 00 49 a8 35 27 b4 8d fc 70 74 ba 9b 68 07 02 00 00 00 02 14 00 94 00 02 00 01 01 00 00 00 00 00 05 09 00 00 00 00 02 14 00 94 00 02 00 01 01 00 00 00 00 00 05 0b 00 00 00 00 02 14 00 ff 00 0f 00 01 01 00 00 00 00 00 05 12 00 00 00 00 0a 14 00 ff 00 0f 00 01 01 00 00 00 00 00 03 00 00 00 00 + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/GPO Backup/{46966231-C83D-42F6-88B5-0B1EBDBD5DC2}/DomainSysvol/GPO/Machine/microsoft/windows nt/SecEdit/GptTmpl.inf b/GPO Backup/{46966231-C83D-42F6-88B5-0B1EBDBD5DC2}/DomainSysvol/GPO/Machine/microsoft/windows nt/SecEdit/GptTmpl.inf new file mode 100644 index 0000000..e33d660 Binary files /dev/null and b/GPO Backup/{46966231-C83D-42F6-88B5-0B1EBDBD5DC2}/DomainSysvol/GPO/Machine/microsoft/windows nt/SecEdit/GptTmpl.inf differ diff --git a/GPO Backup/{46966231-C83D-42F6-88B5-0B1EBDBD5DC2}/bkupInfo.xml b/GPO Backup/{46966231-C83D-42F6-88B5-0B1EBDBD5DC2}/bkupInfo.xml new file mode 100644 index 0000000..4e44849 --- /dev/null +++ b/GPO Backup/{46966231-C83D-42F6-88B5-0B1EBDBD5DC2}/bkupInfo.xml @@ -0,0 +1 @@ + diff --git a/GPO Backup/{46966231-C83D-42F6-88B5-0B1EBDBD5DC2}/gpreport.xml b/GPO Backup/{46966231-C83D-42F6-88B5-0B1EBDBD5DC2}/gpreport.xml new file mode 100644 index 0000000..7138a9b Binary files /dev/null and b/GPO Backup/{46966231-C83D-42F6-88B5-0B1EBDBD5DC2}/gpreport.xml differ diff --git a/GPO Backup/{4C7033E4-5408-452F-8EA8-820089B6DC10}/Backup.xml b/GPO Backup/{4C7033E4-5408-452F-8EA8-820089B6DC10}/Backup.xml new file mode 100644 index 0000000..cba43d1 --- /dev/null +++ b/GPO Backup/{4C7033E4-5408-452F-8EA8-820089B6DC10}/Backup.xml @@ -0,0 +1,18 @@ + + 01 00 04 9c 00 00 00 00 00 00 00 00 00 00 00 00 14 00 00 00 04 00 ec 00 08 00 00 00 05 02 28 00 00 01 00 00 01 00 00 00 8f fd ac ed b3 ff d1 11 b4 1d 00 a0 c9 68 f9 39 01 01 00 00 00 00 00 05 0b 00 00 00 00 00 24 00 ff 00 0f 00 01 05 00 00 00 00 00 05 15 00 00 00 49 a8 35 27 b4 8d fc 70 74 ba 9b 68 00 02 00 00 00 02 24 00 ff 00 0f 00 01 05 00 00 00 00 00 05 15 00 00 00 49 a8 35 27 b4 8d fc 70 74 ba 9b 68 00 02 00 00 00 02 24 00 ff 00 0f 00 01 05 00 00 00 00 00 05 15 00 00 00 49 a8 35 27 b4 8d fc 70 74 ba 9b 68 07 02 00 00 00 02 14 00 94 00 02 00 01 01 00 00 00 00 00 05 09 00 00 00 00 02 14 00 94 00 02 00 01 01 00 00 00 00 00 05 0b 00 00 00 00 02 14 00 ff 00 0f 00 01 01 00 00 00 00 00 05 12 00 00 00 00 0a 14 00 ff 00 0f 00 01 01 00 00 00 00 00 03 00 00 00 00 + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/GPO Backup/{4C7033E4-5408-452F-8EA8-820089B6DC10}/DomainSysvol/GPO/User/Preferences/Registry/Registry.xml b/GPO Backup/{4C7033E4-5408-452F-8EA8-820089B6DC10}/DomainSysvol/GPO/User/Preferences/Registry/Registry.xml new file mode 100644 index 0000000..c2a952a --- /dev/null +++ b/GPO Backup/{4C7033E4-5408-452F-8EA8-820089B6DC10}/DomainSysvol/GPO/User/Preferences/Registry/Registry.xml @@ -0,0 +1,3 @@ + + + diff --git a/GPO Backup/{4C7033E4-5408-452F-8EA8-820089B6DC10}/DomainSysvol/GPO/User/comment.cmtx b/GPO Backup/{4C7033E4-5408-452F-8EA8-820089B6DC10}/DomainSysvol/GPO/User/comment.cmtx new file mode 100644 index 0000000..1e4e4d5 --- /dev/null +++ b/GPO Backup/{4C7033E4-5408-452F-8EA8-820089B6DC10}/DomainSysvol/GPO/User/comment.cmtx @@ -0,0 +1,12 @@ + + + + + + + + + + + + \ No newline at end of file diff --git a/GPO Backup/{4C7033E4-5408-452F-8EA8-820089B6DC10}/DomainSysvol/GPO/User/registry.pol b/GPO Backup/{4C7033E4-5408-452F-8EA8-820089B6DC10}/DomainSysvol/GPO/User/registry.pol new file mode 100644 index 0000000..3fbffbe Binary files /dev/null and b/GPO Backup/{4C7033E4-5408-452F-8EA8-820089B6DC10}/DomainSysvol/GPO/User/registry.pol differ diff --git a/GPO Backup/{4C7033E4-5408-452F-8EA8-820089B6DC10}/bkupInfo.xml b/GPO Backup/{4C7033E4-5408-452F-8EA8-820089B6DC10}/bkupInfo.xml new file mode 100644 index 0000000..476a862 --- /dev/null +++ b/GPO Backup/{4C7033E4-5408-452F-8EA8-820089B6DC10}/bkupInfo.xml @@ -0,0 +1 @@ + diff --git a/GPO Backup/{4C7033E4-5408-452F-8EA8-820089B6DC10}/gpreport.xml b/GPO Backup/{4C7033E4-5408-452F-8EA8-820089B6DC10}/gpreport.xml new file mode 100644 index 0000000..1e3af19 Binary files /dev/null and b/GPO Backup/{4C7033E4-5408-452F-8EA8-820089B6DC10}/gpreport.xml differ diff --git a/GPO Backup/{5D3DCD2C-CD5D-4A26-AEAC-659556F43D13}/Backup.xml b/GPO Backup/{5D3DCD2C-CD5D-4A26-AEAC-659556F43D13}/Backup.xml new file mode 100644 index 0000000..f49b271 --- /dev/null +++ b/GPO Backup/{5D3DCD2C-CD5D-4A26-AEAC-659556F43D13}/Backup.xml @@ -0,0 +1,20 @@ + + 01 00 04 9c 00 00 00 00 00 00 00 00 00 00 00 00 14 00 00 00 04 00 ec 00 08 00 00 00 05 02 28 00 00 01 00 00 01 00 00 00 8f fd ac ed b3 ff d1 11 b4 1d 00 a0 c9 68 f9 39 01 01 00 00 00 00 00 05 0b 00 00 00 00 00 24 00 ff 00 0f 00 01 05 00 00 00 00 00 05 15 00 00 00 49 a8 35 27 b4 8d fc 70 74 ba 9b 68 00 02 00 00 00 02 24 00 ff 00 0f 00 01 05 00 00 00 00 00 05 15 00 00 00 49 a8 35 27 b4 8d fc 70 74 ba 9b 68 00 02 00 00 00 02 24 00 ff 00 0f 00 01 05 00 00 00 00 00 05 15 00 00 00 49 a8 35 27 b4 8d fc 70 74 ba 9b 68 07 02 00 00 00 02 14 00 94 00 02 00 01 01 00 00 00 00 00 05 09 00 00 00 00 02 14 00 94 00 02 00 01 01 00 00 00 00 00 05 0b 00 00 00 00 02 14 00 ff 00 0f 00 01 01 00 00 00 00 00 05 12 00 00 00 00 0a 14 00 ff 00 0f 00 01 01 00 00 00 00 00 03 00 00 00 00 + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/GPO Backup/{5D3DCD2C-CD5D-4A26-AEAC-659556F43D13}/DomainSysvol/GPO/Machine/microsoft/windows nt/SecEdit/GptTmpl.inf b/GPO Backup/{5D3DCD2C-CD5D-4A26-AEAC-659556F43D13}/DomainSysvol/GPO/Machine/microsoft/windows nt/SecEdit/GptTmpl.inf new file mode 100644 index 0000000..b4039bf Binary files /dev/null and b/GPO Backup/{5D3DCD2C-CD5D-4A26-AEAC-659556F43D13}/DomainSysvol/GPO/Machine/microsoft/windows nt/SecEdit/GptTmpl.inf differ diff --git a/GPO Backup/{5D3DCD2C-CD5D-4A26-AEAC-659556F43D13}/bkupInfo.xml b/GPO Backup/{5D3DCD2C-CD5D-4A26-AEAC-659556F43D13}/bkupInfo.xml new file mode 100644 index 0000000..ee95c84 --- /dev/null +++ b/GPO Backup/{5D3DCD2C-CD5D-4A26-AEAC-659556F43D13}/bkupInfo.xml @@ -0,0 +1 @@ + diff --git a/GPO Backup/{5D3DCD2C-CD5D-4A26-AEAC-659556F43D13}/gpreport.xml b/GPO Backup/{5D3DCD2C-CD5D-4A26-AEAC-659556F43D13}/gpreport.xml new file mode 100644 index 0000000..b8aafde Binary files /dev/null and b/GPO Backup/{5D3DCD2C-CD5D-4A26-AEAC-659556F43D13}/gpreport.xml differ diff --git a/GPO Backup/{70E9154D-9966-41C1-8A4E-CC12DE13690A}/Backup.xml b/GPO Backup/{70E9154D-9966-41C1-8A4E-CC12DE13690A}/Backup.xml new file mode 100644 index 0000000..e474b43 --- /dev/null +++ b/GPO Backup/{70E9154D-9966-41C1-8A4E-CC12DE13690A}/Backup.xml @@ -0,0 +1,20 @@ + + 01 00 04 9c 00 00 00 00 00 00 00 00 00 00 00 00 14 00 00 00 04 00 ec 00 08 00 00 00 05 02 28 00 00 01 00 00 01 00 00 00 8f fd ac ed b3 ff d1 11 b4 1d 00 a0 c9 68 f9 39 01 01 00 00 00 00 00 05 0b 00 00 00 00 00 24 00 ff 00 0f 00 01 05 00 00 00 00 00 05 15 00 00 00 49 a8 35 27 b4 8d fc 70 74 ba 9b 68 00 02 00 00 00 02 24 00 ff 00 0f 00 01 05 00 00 00 00 00 05 15 00 00 00 49 a8 35 27 b4 8d fc 70 74 ba 9b 68 00 02 00 00 00 02 24 00 ff 00 0f 00 01 05 00 00 00 00 00 05 15 00 00 00 49 a8 35 27 b4 8d fc 70 74 ba 9b 68 07 02 00 00 00 02 14 00 94 00 02 00 01 01 00 00 00 00 00 05 09 00 00 00 00 02 14 00 94 00 02 00 01 01 00 00 00 00 00 05 0b 00 00 00 00 02 14 00 ff 00 0f 00 01 01 00 00 00 00 00 05 12 00 00 00 00 0a 14 00 ff 00 0f 00 01 01 00 00 00 00 00 03 00 00 00 00 + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/GPO Backup/{70E9154D-9966-41C1-8A4E-CC12DE13690A}/DomainSysvol/GPO/Machine/microsoft/windows nt/SecEdit/GptTmpl.inf b/GPO Backup/{70E9154D-9966-41C1-8A4E-CC12DE13690A}/DomainSysvol/GPO/Machine/microsoft/windows nt/SecEdit/GptTmpl.inf new file mode 100644 index 0000000..8817311 Binary files /dev/null and b/GPO Backup/{70E9154D-9966-41C1-8A4E-CC12DE13690A}/DomainSysvol/GPO/Machine/microsoft/windows nt/SecEdit/GptTmpl.inf differ diff --git a/GPO Backup/{70E9154D-9966-41C1-8A4E-CC12DE13690A}/bkupInfo.xml b/GPO Backup/{70E9154D-9966-41C1-8A4E-CC12DE13690A}/bkupInfo.xml new file mode 100644 index 0000000..a95383d --- /dev/null +++ b/GPO Backup/{70E9154D-9966-41C1-8A4E-CC12DE13690A}/bkupInfo.xml @@ -0,0 +1 @@ + diff --git a/GPO Backup/{70E9154D-9966-41C1-8A4E-CC12DE13690A}/gpreport.xml b/GPO Backup/{70E9154D-9966-41C1-8A4E-CC12DE13690A}/gpreport.xml new file mode 100644 index 0000000..7a027ff Binary files /dev/null and b/GPO Backup/{70E9154D-9966-41C1-8A4E-CC12DE13690A}/gpreport.xml differ diff --git a/GPO Backup/{7C6FC4CB-65C0-4A96-936D-9A62801368CE}/Backup.xml b/GPO Backup/{7C6FC4CB-65C0-4A96-936D-9A62801368CE}/Backup.xml new file mode 100644 index 0000000..07d5c42 --- /dev/null +++ b/GPO Backup/{7C6FC4CB-65C0-4A96-936D-9A62801368CE}/Backup.xml @@ -0,0 +1,20 @@ + + 01 00 04 9c 00 00 00 00 00 00 00 00 00 00 00 00 14 00 00 00 04 00 ec 00 08 00 00 00 05 02 28 00 00 01 00 00 01 00 00 00 8f fd ac ed b3 ff d1 11 b4 1d 00 a0 c9 68 f9 39 01 01 00 00 00 00 00 05 0b 00 00 00 00 00 24 00 ff 00 0f 00 01 05 00 00 00 00 00 05 15 00 00 00 49 a8 35 27 b4 8d fc 70 74 ba 9b 68 00 02 00 00 00 02 24 00 ff 00 0f 00 01 05 00 00 00 00 00 05 15 00 00 00 49 a8 35 27 b4 8d fc 70 74 ba 9b 68 00 02 00 00 00 02 24 00 ff 00 0f 00 01 05 00 00 00 00 00 05 15 00 00 00 49 a8 35 27 b4 8d fc 70 74 ba 9b 68 07 02 00 00 00 02 14 00 94 00 02 00 01 01 00 00 00 00 00 05 09 00 00 00 00 02 14 00 94 00 02 00 01 01 00 00 00 00 00 05 0b 00 00 00 00 02 14 00 ff 00 0f 00 01 01 00 00 00 00 00 05 12 00 00 00 00 0a 14 00 ff 00 0f 00 01 01 00 00 00 00 00 03 00 00 00 00 + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/GPO Backup/{7C6FC4CB-65C0-4A96-936D-9A62801368CE}/DomainSysvol/GPO/Machine/Preferences/Groups/Groups.xml b/GPO Backup/{7C6FC4CB-65C0-4A96-936D-9A62801368CE}/DomainSysvol/GPO/Machine/Preferences/Groups/Groups.xml new file mode 100644 index 0000000..a95052f --- /dev/null +++ b/GPO Backup/{7C6FC4CB-65C0-4A96-936D-9A62801368CE}/DomainSysvol/GPO/Machine/Preferences/Groups/Groups.xml @@ -0,0 +1,9 @@ + + + + + + + + + diff --git a/GPO Backup/{7C6FC4CB-65C0-4A96-936D-9A62801368CE}/DomainSysvol/GPO/Machine/microsoft/windows nt/SecEdit/GptTmpl.inf b/GPO Backup/{7C6FC4CB-65C0-4A96-936D-9A62801368CE}/DomainSysvol/GPO/Machine/microsoft/windows nt/SecEdit/GptTmpl.inf new file mode 100644 index 0000000..4094b1e Binary files /dev/null and b/GPO Backup/{7C6FC4CB-65C0-4A96-936D-9A62801368CE}/DomainSysvol/GPO/Machine/microsoft/windows nt/SecEdit/GptTmpl.inf differ diff --git a/GPO Backup/{7C6FC4CB-65C0-4A96-936D-9A62801368CE}/DomainSysvol/GPO/Machine/registry.pol b/GPO Backup/{7C6FC4CB-65C0-4A96-936D-9A62801368CE}/DomainSysvol/GPO/Machine/registry.pol new file mode 100644 index 0000000..5a00da1 Binary files /dev/null and b/GPO Backup/{7C6FC4CB-65C0-4A96-936D-9A62801368CE}/DomainSysvol/GPO/Machine/registry.pol differ diff --git a/GPO Backup/{7C6FC4CB-65C0-4A96-936D-9A62801368CE}/bkupInfo.xml b/GPO Backup/{7C6FC4CB-65C0-4A96-936D-9A62801368CE}/bkupInfo.xml new file mode 100644 index 0000000..d5abec5 --- /dev/null +++ b/GPO Backup/{7C6FC4CB-65C0-4A96-936D-9A62801368CE}/bkupInfo.xml @@ -0,0 +1 @@ + diff --git a/GPO Backup/{7C6FC4CB-65C0-4A96-936D-9A62801368CE}/gpreport.xml b/GPO Backup/{7C6FC4CB-65C0-4A96-936D-9A62801368CE}/gpreport.xml new file mode 100644 index 0000000..da85589 Binary files /dev/null and b/GPO Backup/{7C6FC4CB-65C0-4A96-936D-9A62801368CE}/gpreport.xml differ diff --git a/GPO Backup/{B9E332A3-0175-460E-8816-57E2C77551E3}/Backup.xml b/GPO Backup/{B9E332A3-0175-460E-8816-57E2C77551E3}/Backup.xml new file mode 100644 index 0000000..21344a9 --- /dev/null +++ b/GPO Backup/{B9E332A3-0175-460E-8816-57E2C77551E3}/Backup.xml @@ -0,0 +1,18 @@ + + 01 00 04 9c 00 00 00 00 00 00 00 00 00 00 00 00 14 00 00 00 04 00 ec 00 08 00 00 00 05 02 28 00 00 01 00 00 01 00 00 00 8f fd ac ed b3 ff d1 11 b4 1d 00 a0 c9 68 f9 39 01 01 00 00 00 00 00 05 0b 00 00 00 00 00 24 00 ff 00 0f 00 01 05 00 00 00 00 00 05 15 00 00 00 49 a8 35 27 b4 8d fc 70 74 ba 9b 68 00 02 00 00 00 02 24 00 ff 00 0f 00 01 05 00 00 00 00 00 05 15 00 00 00 49 a8 35 27 b4 8d fc 70 74 ba 9b 68 00 02 00 00 00 02 24 00 ff 00 0f 00 01 05 00 00 00 00 00 05 15 00 00 00 49 a8 35 27 b4 8d fc 70 74 ba 9b 68 07 02 00 00 00 02 14 00 94 00 02 00 01 01 00 00 00 00 00 05 09 00 00 00 00 02 14 00 94 00 02 00 01 01 00 00 00 00 00 05 0b 00 00 00 00 02 14 00 ff 00 0f 00 01 01 00 00 00 00 00 05 12 00 00 00 00 0a 14 00 ff 00 0f 00 01 01 00 00 00 00 00 03 00 00 00 00 + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/GPO Backup/{B9E332A3-0175-460E-8816-57E2C77551E3}/DomainSysvol/GPO/User/Preferences/Registry/Registry.xml b/GPO Backup/{B9E332A3-0175-460E-8816-57E2C77551E3}/DomainSysvol/GPO/User/Preferences/Registry/Registry.xml new file mode 100644 index 0000000..f9fb30f --- /dev/null +++ b/GPO Backup/{B9E332A3-0175-460E-8816-57E2C77551E3}/DomainSysvol/GPO/User/Preferences/Registry/Registry.xml @@ -0,0 +1,3 @@ + + + diff --git a/GPO Backup/{B9E332A3-0175-460E-8816-57E2C77551E3}/DomainSysvol/GPO/User/comment.cmtx b/GPO Backup/{B9E332A3-0175-460E-8816-57E2C77551E3}/DomainSysvol/GPO/User/comment.cmtx new file mode 100644 index 0000000..1e4e4d5 --- /dev/null +++ b/GPO Backup/{B9E332A3-0175-460E-8816-57E2C77551E3}/DomainSysvol/GPO/User/comment.cmtx @@ -0,0 +1,12 @@ + + + + + + + + + + + + \ No newline at end of file diff --git a/GPO Backup/{B9E332A3-0175-460E-8816-57E2C77551E3}/DomainSysvol/GPO/User/registry.pol b/GPO Backup/{B9E332A3-0175-460E-8816-57E2C77551E3}/DomainSysvol/GPO/User/registry.pol new file mode 100644 index 0000000..3fbffbe Binary files /dev/null and b/GPO Backup/{B9E332A3-0175-460E-8816-57E2C77551E3}/DomainSysvol/GPO/User/registry.pol differ diff --git a/GPO Backup/{B9E332A3-0175-460E-8816-57E2C77551E3}/bkupInfo.xml b/GPO Backup/{B9E332A3-0175-460E-8816-57E2C77551E3}/bkupInfo.xml new file mode 100644 index 0000000..6b86b24 --- /dev/null +++ b/GPO Backup/{B9E332A3-0175-460E-8816-57E2C77551E3}/bkupInfo.xml @@ -0,0 +1 @@ + diff --git a/GPO Backup/{B9E332A3-0175-460E-8816-57E2C77551E3}/gpreport.xml b/GPO Backup/{B9E332A3-0175-460E-8816-57E2C77551E3}/gpreport.xml new file mode 100644 index 0000000..597bde4 Binary files /dev/null and b/GPO Backup/{B9E332A3-0175-460E-8816-57E2C77551E3}/gpreport.xml differ diff --git a/GPO Backup/{DCBEE54D-0B0F-44CD-B9F4-532EF947E519}/Backup.xml b/GPO Backup/{DCBEE54D-0B0F-44CD-B9F4-532EF947E519}/Backup.xml new file mode 100644 index 0000000..5863abf --- /dev/null +++ b/GPO Backup/{DCBEE54D-0B0F-44CD-B9F4-532EF947E519}/Backup.xml @@ -0,0 +1,18 @@ + + 01 00 04 9c 00 00 00 00 00 00 00 00 00 00 00 00 14 00 00 00 04 00 ec 00 08 00 00 00 05 02 28 00 00 01 00 00 01 00 00 00 8f fd ac ed b3 ff d1 11 b4 1d 00 a0 c9 68 f9 39 01 01 00 00 00 00 00 05 0b 00 00 00 00 00 24 00 ff 00 0f 00 01 05 00 00 00 00 00 05 15 00 00 00 49 a8 35 27 b4 8d fc 70 74 ba 9b 68 00 02 00 00 00 02 24 00 ff 00 0f 00 01 05 00 00 00 00 00 05 15 00 00 00 49 a8 35 27 b4 8d fc 70 74 ba 9b 68 00 02 00 00 00 02 24 00 ff 00 0f 00 01 05 00 00 00 00 00 05 15 00 00 00 49 a8 35 27 b4 8d fc 70 74 ba 9b 68 07 02 00 00 00 02 14 00 94 00 02 00 01 01 00 00 00 00 00 05 09 00 00 00 00 02 14 00 94 00 02 00 01 01 00 00 00 00 00 05 0b 00 00 00 00 02 14 00 ff 00 0f 00 01 01 00 00 00 00 00 05 12 00 00 00 00 0a 14 00 ff 00 0f 00 01 01 00 00 00 00 00 03 00 00 00 00 + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/GPO Backup/{DCBEE54D-0B0F-44CD-B9F4-532EF947E519}/DomainSysvol/GPO/User/Preferences/Registry/Registry.xml b/GPO Backup/{DCBEE54D-0B0F-44CD-B9F4-532EF947E519}/DomainSysvol/GPO/User/Preferences/Registry/Registry.xml new file mode 100644 index 0000000..dc57b5f --- /dev/null +++ b/GPO Backup/{DCBEE54D-0B0F-44CD-B9F4-532EF947E519}/DomainSysvol/GPO/User/Preferences/Registry/Registry.xml @@ -0,0 +1,4 @@ + + + + diff --git a/GPO Backup/{DCBEE54D-0B0F-44CD-B9F4-532EF947E519}/DomainSysvol/GPO/User/comment.cmtx b/GPO Backup/{DCBEE54D-0B0F-44CD-B9F4-532EF947E519}/DomainSysvol/GPO/User/comment.cmtx new file mode 100644 index 0000000..1e4e4d5 --- /dev/null +++ b/GPO Backup/{DCBEE54D-0B0F-44CD-B9F4-532EF947E519}/DomainSysvol/GPO/User/comment.cmtx @@ -0,0 +1,12 @@ + + + + + + + + + + + + \ No newline at end of file diff --git a/GPO Backup/{DCBEE54D-0B0F-44CD-B9F4-532EF947E519}/DomainSysvol/GPO/User/registry.pol b/GPO Backup/{DCBEE54D-0B0F-44CD-B9F4-532EF947E519}/DomainSysvol/GPO/User/registry.pol new file mode 100644 index 0000000..aac722b Binary files /dev/null and b/GPO Backup/{DCBEE54D-0B0F-44CD-B9F4-532EF947E519}/DomainSysvol/GPO/User/registry.pol differ diff --git a/GPO Backup/{DCBEE54D-0B0F-44CD-B9F4-532EF947E519}/bkupInfo.xml b/GPO Backup/{DCBEE54D-0B0F-44CD-B9F4-532EF947E519}/bkupInfo.xml new file mode 100644 index 0000000..32b2e16 --- /dev/null +++ b/GPO Backup/{DCBEE54D-0B0F-44CD-B9F4-532EF947E519}/bkupInfo.xml @@ -0,0 +1 @@ + diff --git a/GPO Backup/{DCBEE54D-0B0F-44CD-B9F4-532EF947E519}/gpreport.xml b/GPO Backup/{DCBEE54D-0B0F-44CD-B9F4-532EF947E519}/gpreport.xml new file mode 100644 index 0000000..2dc00da Binary files /dev/null and b/GPO Backup/{DCBEE54D-0B0F-44CD-B9F4-532EF947E519}/gpreport.xml differ diff --git a/GPO Backup/{F596D010-C445-4AC5-BCCF-6E7A2503CE78}/Backup.xml b/GPO Backup/{F596D010-C445-4AC5-BCCF-6E7A2503CE78}/Backup.xml new file mode 100644 index 0000000..75f1138 --- /dev/null +++ b/GPO Backup/{F596D010-C445-4AC5-BCCF-6E7A2503CE78}/Backup.xml @@ -0,0 +1,20 @@ + + 01 00 04 9c 00 00 00 00 00 00 00 00 00 00 00 00 14 00 00 00 04 00 ec 00 08 00 00 00 05 02 28 00 00 01 00 00 01 00 00 00 8f fd ac ed b3 ff d1 11 b4 1d 00 a0 c9 68 f9 39 01 01 00 00 00 00 00 05 0b 00 00 00 00 00 24 00 ff 00 0f 00 01 05 00 00 00 00 00 05 15 00 00 00 49 a8 35 27 b4 8d fc 70 74 ba 9b 68 00 02 00 00 00 02 24 00 ff 00 0f 00 01 05 00 00 00 00 00 05 15 00 00 00 49 a8 35 27 b4 8d fc 70 74 ba 9b 68 00 02 00 00 00 02 24 00 ff 00 0f 00 01 05 00 00 00 00 00 05 15 00 00 00 49 a8 35 27 b4 8d fc 70 74 ba 9b 68 07 02 00 00 00 02 14 00 94 00 02 00 01 01 00 00 00 00 00 05 09 00 00 00 00 02 14 00 94 00 02 00 01 01 00 00 00 00 00 05 0b 00 00 00 00 02 14 00 ff 00 0f 00 01 01 00 00 00 00 00 05 12 00 00 00 00 0a 14 00 ff 00 0f 00 01 01 00 00 00 00 00 03 00 00 00 00 + + + + + + + + + + + + + + + + + + \ No newline at end of file diff --git a/GPO Backup/{F596D010-C445-4AC5-BCCF-6E7A2503CE78}/DomainSysvol/GPO/Machine/Preferences/Groups/Groups.xml b/GPO Backup/{F596D010-C445-4AC5-BCCF-6E7A2503CE78}/DomainSysvol/GPO/Machine/Preferences/Groups/Groups.xml new file mode 100644 index 0000000..bc79d6b --- /dev/null +++ b/GPO Backup/{F596D010-C445-4AC5-BCCF-6E7A2503CE78}/DomainSysvol/GPO/Machine/Preferences/Groups/Groups.xml @@ -0,0 +1,9 @@ + + + + + + + + + diff --git a/GPO Backup/{F596D010-C445-4AC5-BCCF-6E7A2503CE78}/DomainSysvol/GPO/Machine/microsoft/windows nt/SecEdit/GptTmpl.inf b/GPO Backup/{F596D010-C445-4AC5-BCCF-6E7A2503CE78}/DomainSysvol/GPO/Machine/microsoft/windows nt/SecEdit/GptTmpl.inf new file mode 100644 index 0000000..82ed125 Binary files /dev/null and b/GPO Backup/{F596D010-C445-4AC5-BCCF-6E7A2503CE78}/DomainSysvol/GPO/Machine/microsoft/windows nt/SecEdit/GptTmpl.inf differ diff --git a/GPO Backup/{F596D010-C445-4AC5-BCCF-6E7A2503CE78}/DomainSysvol/GPO/Machine/registry.pol b/GPO Backup/{F596D010-C445-4AC5-BCCF-6E7A2503CE78}/DomainSysvol/GPO/Machine/registry.pol new file mode 100644 index 0000000..23a3474 Binary files /dev/null and b/GPO Backup/{F596D010-C445-4AC5-BCCF-6E7A2503CE78}/DomainSysvol/GPO/Machine/registry.pol differ diff --git a/GPO Backup/{F596D010-C445-4AC5-BCCF-6E7A2503CE78}/bkupInfo.xml b/GPO Backup/{F596D010-C445-4AC5-BCCF-6E7A2503CE78}/bkupInfo.xml new file mode 100644 index 0000000..e28ff5d --- /dev/null +++ b/GPO Backup/{F596D010-C445-4AC5-BCCF-6E7A2503CE78}/bkupInfo.xml @@ -0,0 +1 @@ + diff --git a/GPO Backup/{F596D010-C445-4AC5-BCCF-6E7A2503CE78}/gpreport.xml b/GPO Backup/{F596D010-C445-4AC5-BCCF-6E7A2503CE78}/gpreport.xml new file mode 100644 index 0000000..32e8b91 Binary files /dev/null and b/GPO Backup/{F596D010-C445-4AC5-BCCF-6E7A2503CE78}/gpreport.xml differ diff --git a/Import-GPO.ps1 b/Import-GPO.ps1 new file mode 100644 index 0000000..f3ed6ef --- /dev/null +++ b/Import-GPO.ps1 @@ -0,0 +1,34 @@ +<# + .Example + $BackupPath = Read-Host -Prompt "Please provide full path to GPO backups" + .\Import-GPO.ps1 -BackupPath $BackupPath -Verbose + +#> + +[CmdletBinding()] +param( + [Parameter(Mandatory = $True)][string] $BackupPath, + [string] $GPOMigrationTable +) + +$backupList = Get-ChildItem -Path $BackupPath -Exclude "manifest.xml" +Set-Location $BackupPath +$location = Get-Location +foreach ($item in $backupList){ + $backupID = $null + $xmlFilePath = $null + $gpoName = $null + $backupID = $item.name -replace "{","" -replace "}","" + $xmlFilePath = ".\$($item.name)\gpreport.xml" + [xml]$xmlFile = Get-Content -Path $xmlFilePath + $gpoName = $xmlFile.GPO.Name + Write-Verbose "Importing new GPO '$gpoName' with GUID '$backupID'" + Write-Verbose "Please remember to update proper groups in GPO settings" + if ($GPOMigrationTable -eq $null) { + Import-GPO -BackupId $backupID -TargetName $gpoName -Path $BackupPath -CreateIfNeeded + } + else { + Import-GPO -BackupId $backupID -TargetName $gpoName -Path $BackupPath -MigrationTable $GPOMigrationTable -CreateIfNeeded + } + Set-Location $location +} diff --git a/Link-GpoToOU.ps1 b/Link-GpoToOU.ps1 new file mode 100644 index 0000000..f710fa5 --- /dev/null +++ b/Link-GpoToOU.ps1 @@ -0,0 +1,31 @@ +<# + .EXAMPLE + $GpoLinks = @( + $(New-Object PSObject -Property @{ Name = "POLICYNAME" ; OU = "OUPATH"; Order = 1; LinkEnabled = 'YES'}), + ) + .\Link-GpoToOU.ps1 -GpoLinks $GpoLinks -Verbose +#> + + +[CmdletBinding()] +param( + [Parameter(Mandatory = $True)][PSObject] $GpoLinks +) +Import-Module ActiveDirectory +$DC = (Get-ADDomain).DistinguishedName + +$GpoLinks | foreach-Object { + $name = $_.Name + $OU = $_.ou + $order = $_.Order + $LinkEnabled = $_.LinkEnabled + if ($OU -eq "") { + + $ouPath = $DC + } + else { + $ouPath = "$OU,$DC" + } + Write-Verbose "Linking GPO '$name' into OU '$ouPath'" + New-GPLink -Name $name -Target $ouPath -LinkEnabled $LinkEnabled -Order $order +} diff --git a/PAW_steps.ps1 b/PAW_steps.ps1 new file mode 100644 index 0000000..4733d7b --- /dev/null +++ b/PAW_steps.ps1 @@ -0,0 +1,76 @@ +Throw "this is not a robust file" +$location = Get-Location +Set-Location C:\Tools\PAW + +#Region create Groups +$csv = Read-Host -Prompt "Please provide full path to Admin Groups csv file" +.\Create-Group.ps1 -CSVfile $csv -Verbose +$csv = Read-Host -Prompt "Please provide full path to Standard Groups csv file" +.\Create-Group.ps1 -CSVfile $csv -Verbose +#endRegion + +#Region create Users +$csv = Read-Host -Prompt "Please provide full path to Users csv file" +.\Create-User.ps1 -CSVfile $csv -password zaq12WSXcde3 -Verbose +#endRegion + +#region import GPO + Throw "Please update migration table file" + $BackupPath = Read-Host -Prompt "Please provide full path to GPO backups" + $GPOMigrationTable = Read-Host -Prompt "Please provide full path to GPO Migration Table" + .\Import-GPO.ps1 -BackupPath $BackupPath -GPOMigrationTable $GPOMigrationTable -Verbose + Set-Location C:\Tools\PAW + Write-Host "!!!!!!!!!!!!!!!! Please copy proxy.pac file to the Sysvol\Scripts\" -ForegroundColor Green +#endregion + +#region Link gpo + $GpoLinks = @( + $(New-Object PSObject -Property @{ Name = "Do Not Display Logon Information" ; OU = "OU=Devices,OU=Tier0,OU=Admin"; Order = 1 ;LinkEnabled = 'YES'}), + $(New-Object PSObject -Property @{ Name = "Do Not Display Logon Information" ; OU = "OU=Tier0 Servers,OU=Tier0,OU=Admin"; Order = 1 ;LinkEnabled = 'YES'}), + $(New-Object PSObject -Property @{ Name = "Do Not Display Logon Information" ; OU = "OU=Devices,OU=Tier1,OU=Admin"; Order = 1 ;LinkEnabled = 'YES'}), + $(New-Object PSObject -Property @{ Name = "Do Not Display Logon Information" ; OU = "OU=Devices,OU=Tier2,OU=Admin"; Order = 1 ;LinkEnabled = 'YES'}), + $(New-Object PSObject -Property @{ Name = "Do Not Display Logon Information" ; OU = "OU=Tier 1 Servers"; Order = 1 ;LinkEnabled = 'YES'}), + $(New-Object PSObject -Property @{ Name = "Do Not Display Logon Information" ; OU = "OU=Workstations"; Order = 1 ;LinkEnabled = 'YES'}), + $(New-Object PSObject -Property @{ Name = "Restrict Quarantine Logon" ; OU = "OU=Quarantine"; Order = 1 ;LinkEnabled = 'YES'}), + $(New-Object PSObject -Property @{ Name = "Tier0 Restrict Server Logon" ; OU = "OU=Devices,OU=Tier0,OU=Admin"; Order = 1 ;LinkEnabled = 'YES'}), + $(New-Object PSObject -Property @{ Name = "Tier0 Restrict Server Logon" ; OU = "OU=Tier0 Servers,OU=Tier0,OU=Admin"; Order = 1 ;LinkEnabled = 'YES'}), + $(New-Object PSObject -Property @{ Name = "Tier1 Restrict Server Logon" ; OU = "OU=Devices,OU=Tier1,OU=Admin"; Order = 1 ;LinkEnabled = 'YES'}), + $(New-Object PSObject -Property @{ Name = "Tier1 Restrict Server Logon" ; OU = "OU=Tier 1 Servers"; Order = 1 ;LinkEnabled = 'YES'}), + $(New-Object PSObject -Property @{ Name = "Tier2 Restrict Workstation Logon" ; OU = "OU=Devices,OU=Tier2,OU=Admin"; Order = 1 ;LinkEnabled = 'YES'}), + $(New-Object PSObject -Property @{ Name = "Tier2 Restrict Workstation Logon" ; OU = "OU=Workstations"; Order = 1 ;LinkEnabled = 'YES'}), + $(New-Object PSObject -Property @{ Name = "Tier0 PAW Configuration - Computer" ; OU = "OU=Devices,OU=Tier0,OU=Admin"; Order = 1 ;LinkEnabled = 'YES'}), + $(New-Object PSObject -Property @{ Name = "Tier0 PAW Configuration - User" ; OU = "OU=Accounts,OU=Tier0,OU=Admin"; Order = 1 ;LinkEnabled = 'No'}), + $(New-Object PSObject -Property @{ Name = "Tier0 PAW Configuration - User PAC" ; OU = "OU=Accounts,OU=Tier0,OU=Admin"; Order = 1 ;LinkEnabled = 'YES'}), + $(New-Object PSObject -Property @{ Name = "Tier1 PAW Configuration - Computer" ; OU = "OU=Devices,OU=Tier1,OU=Admin"; Order = 1 ;LinkEnabled = 'YES'}), + $(New-Object PSObject -Property @{ Name = "Tier1 PAW Configuration - User" ; OU = "OU=Accounts,OU=Tier1,OU=Admin"; Order = 1 ;LinkEnabled = 'NO'}) + $(New-Object PSObject -Property @{ Name = "Tier1 PAW Configuration - User PAC" ; OU = "OU=Accounts,OU=Tier1,OU=Admin"; Order = 1 ;LinkEnabled = 'YES'}) + ) + .\Link-GpoToOU.ps1 -GpoLinks $GpoLinks -Verbose +dsa.msc +gpmc.msc +#endregion + +#region Setup Computer Objects + Get-ADComputer -Identity W10 | Move-ADObject -TargetPath "OU=Quarantine,DC=Azureblog,DC=pl" + Get-ADComputer -Identity SRV01 | Move-ADObject -TargetPath "OU=Devices,OU=Tier0,OU=Admin,DC=Azureblog,DC=pl" + Get-ADCOmputer -Identity W10 + Get-ADComputer -Identity SRV01 +#endregion + +#region Tier0PAWUser on SRV01 + whoami /groups + net user testuser zaq12WSX /add + [System.Net.WebProxy]::GetDefaultProxy() | select address +#endregion + +#region Tier0PAWMAintenancer on SRV01 + whoami /groups + net user testuser zaq12WSX /add + net user testuser + net user testuser /del + [System.Net.WebProxy]::GetDefaultProxy() | select address +#endregion + +Set-Location $location + + diff --git a/StandardGroups.csv b/StandardGroups.csv new file mode 100644 index 0000000..6941cda --- /dev/null +++ b/StandardGroups.csv @@ -0,0 +1,5 @@ +Name,samAccountName,GroupCategory,GroupScope,DisplayName,OU,Description,Membership +Test Group 1,testgroup1,Security,Global,Test Group 1,"ou=Security Groups,OU=Groups",Group with random members, +Test Group 2,testgroup2,Security,Global,Test Group 2,"ou=Security Groups,OU=Groups",Group with random members, +Test Group 3,testgroup3,Security,Global,Test Group 3,"ou=Security Groups,OU=Groups",Group with random members, +Test Group 4,testgroup4,Security,Global,Test Group 4,"ou=Security Groups,OU=Groups",Group with random members, diff --git a/Users.csv b/Users.csv new file mode 100644 index 0000000..10bab25 --- /dev/null +++ b/Users.csv @@ -0,0 +1,28 @@ +Name,samAccountName,ParentOU,GroupMembership,Enabled +Robert Przybylski,robert.przybylski,"OU=Accounts,OU=Tier0,OU=Admin","Domain Admins",True +Tier0 PAW Maintenancer,tier0pawmaintenancer,"OU=Accounts,OU=Tier0,OU=Admin",Tier0PAWMaint,True +Tier1 PAW Maintenancer,tier1pawmaintenancer,"OU=Accounts,OU=Tier1,OU=Admin",Tier1PAWMaint,True +Tier0 PAW User,tier0pawuser,"OU=Accounts,OU=Tier0,OU=Admin","Tier0PAWUsers,Domain Admins",True +Tier1 PAW User,tier1pawuser,"OU=Accounts,OU=Tier1,OU=Admin","Tier1PAWUsers,Tier1ServerMaintenance",True +Tier2 SD User,tier2sduser,"OU=Accounts,OU=Tier2,OU=Admin","Tier2ServiceDeskOperators",True +Tier2 WM User,tier2wmuser,"OU=Accounts,OU=Tier2,OU=Admin","Tier2WorkstationMaintenance",True +Bruce Banner,brucebanner,"ou=Enabled Users,ou=User Accounts","testGroup1",True +Iron Man,ironman,"OU=Accounts,OU=Tier2,OU=Admin","Tier2ServiceDeskOperators,Tier2WorkstationMaintenance,Tier2Admins",True +Capitan America,capitanamerica,"ou=Enabled Users,ou=User Accounts","testGroup3",True +Spider Man,spiderman,"ou=Disabled Users,ou=User Accounts","testGroup4",False +Black Widow,blackwidow,"ou=Enabled Users,ou=User Accounts","testGroup1,DNSAdmins",True +Thor,thor,"ou=Disabled Users,ou=User Accounts","testGroup2",False +BlackPanter,blackpanter,"ou=Enabled Users,ou=User Accounts","testGroup3",True +Clint Barton,clintbarton,"ou=Disabled Users,ou=User Accounts","testGroup4",False +Im Groot,imgroot,"ou=Enabled Users,ou=User Accounts","testGroup1",True +Doctor Strange,doctorstrange,"ou=Disabled Users,ou=User Accounts","testGroup2",False +Star Lord,starlord,"OU=Accounts,OU=Tier1,OU=Admin","Tier1PAWUsers,Tier1ServerMaintenance,Tier1Admins",True +Vision,vision,"ou=Disabled Users,ou=User Accounts","testGroup4",False +Loki,loki,"ou=Enabled Users,ou=User Accounts","testGroup1",True +Bucky Barnes,buckybarnes,"ou=Disabled Users,ou=User Accounts","testGroup2",False +Rocket Raccoon,rocketraccoon,"ou=Enabled Users,ou=User Accounts","testGroup3",True +Nick Fury,nickfurry,"ou=Disabled Users,ou=User Accounts","testGroup4",False +Drax,drax,"ou=Enabled Users,ou=User Accounts","testGroup1",True +Sam Wilson,samwilson,"ou=Disabled Users,ou=User Accounts","testGroup2",False +Justin Case,justincase,"ou=Enabled Users,ou=User Accounts","testGroup3,Tier0PhysicalAccess",True +Replication Service,svc_replicator,"OU=Service Accounts,OU=Tier0,OU=Admin","Tier0ReplicationMaintenance",True diff --git a/gpo_backup.migtable b/gpo_backup.migtable new file mode 100644 index 0000000..62670ea --- /dev/null +++ b/gpo_backup.migtable @@ -0,0 +1,113 @@ + + + + GlobalGroup + Tier0ReplicationMaintenance@azureblog.pl + Tier0ReplicationMaintenance@azureblog.pl + + + GlobalGroup + Domain Admins@azureblog.pl + Domain Admins@azureblog.pl + + + Unknown + Administrators + Administrators + + + GlobalGroup + Domain Controllers@azureblog.pl + Domain Controllers@azureblog.pl + + + UniversalGroup + Enterprise Admins@azureblog.pl + Enterprise Admins@azureblog.pl + + + GlobalGroup + Tier0PAWUsers@azureblog.pl + Tier0PAWUsers@azureblog.pl + + + GlobalGroup + Group Policy Creator Owners@azureblog.pl + Group Policy Creator Owners@azureblog.pl + + + GlobalGroup + Tier1PAWUsers@azureblog.pl + Tier1PAWUsers@azureblog.pl + + + GlobalGroup + tier2admins@azureblog.pl + tier2admins@azureblog.pl + + + Unknown + Backup Operators + Backup Operators + + + GlobalGroup + Read-only Domain Controllers@azureblog.pl + Read-only Domain Controllers@azureblog.pl + + + GlobalGroup + Tier1PAWMaint@azureblog.pl + Tier1PAWMaint@azureblog.pl + + + GlobalGroup + Tier2ServiceDeskOperators@azureblog.pl + Tier2ServiceDeskOperators@azureblog.pl + + + GlobalGroup + Tier1ServerMaintenance@azureblog.pl + Tier1ServerMaintenance@azureblog.pl + + + GlobalGroup + Tier2WorkstationMaintenance@azureblog.pl + Tier2WorkstationMaintenance@azureblog.pl + + + Unknown + Server Operators + Server Operators + + + Unknown + Account Operators + Account Operators + + + Unknown + Print Operators + Print Operators + + + GlobalGroup + Tier0PAWMaint@azureblog.pl + Tier0PAWMaint@azureblog.pl + + + GlobalGroup + tier1admins@azureblog.pl + tier1admins@azureblog.pl + + + Unknown + Cryptographic Operators + Cryptographic Operators + + + UniversalGroup + Schema Admins@azureblog.pl + Schema Admins@azureblog.pl + + diff --git a/proxy.pac b/proxy.pac new file mode 100644 index 0000000..7660af1 --- /dev/null +++ b/proxy.pac @@ -0,0 +1,52 @@ +function FindProxyForURL(url, host) { + +if (shExpMatch(host, "*.aspnetcdn.com")) { return "DIRECT"; } +if (shExpMatch(host, "*.aadrm.com")) { return "DIRECT"; } +if (shExpMatch(host, "*.appex.bing.com")) { return "DIRECT"; } +if (shExpMatch(host, "*.appex-rf.msn.com")) { return "DIRECT"; } +if (shExpMatch(host, "*.assets-yammer.com")) { return "DIRECT"; } +if (shExpMatch(host, "*.azure.com")) { return "DIRECT"; } +if (shExpMatch(host, "*.azurecomcdn.net")) { return "DIRECT"; } +if (shExpMatch(host, "*.cloudappsecurity.com")) { return "DIRECT"; } +if (shExpMatch(host, "*.c.bing.com")) { return "DIRECT"; } +if (shExpMatch(host, "*.gfx.ms")) { return "DIRECT"; } +if (shExpMatch(host, "*.live.com")) { return "DIRECT"; } +if (shExpMatch(host, "*.live.net")) { return "DIRECT"; } +if (shExpMatch(host, "*.lync.com")) { return "DIRECT"; } +if (shExpMatch(host, "maodatafeedsservice.cloudapp.net")) { return "DIRECT"; } +if (shExpMatch(host, "*.microsoft.com")) { return "DIRECT"; } +if (shExpMatch(host, "*.microsoftonline.com")) { return "DIRECT"; } +if (shExpMatch(host, "*.microsoftonline-p.com")) { return "DIRECT"; } +if (shExpMatch(host, "*.microsoftonline-p.net")) { return "DIRECT"; } +if (shExpMatch(host, "*.microsoftonlineimages.com")) { return "DIRECT"; } +if (shExpMatch(host, "*.microsoftonlinesupport.net")) { return "DIRECT"; } +if (shExpMatch(host, "ms.tific.com")) { return "DIRECT"; } +if (shExpMatch(host, "*.msecnd.net")) { return "DIRECT"; } +if (shExpMatch(host, "*.msedge.net")) { return "DIRECT"; } +if (shExpMatch(host, "*.msft.net")) { return "DIRECT"; } +if (shExpMatch(host, "*.msocdn.com")) { return "DIRECT"; } +if (shExpMatch(host, "*.onenote.com")) { return "DIRECT"; } +if (shExpMatch(host, "*.outlook.com")) { return "DIRECT"; } +if (shExpMatch(host, "*.office365.com")) { return "DIRECT"; } +if (shExpMatch(host, "*.office.com")) { return "DIRECT"; } +if (shExpMatch(host, "*.office.net")) { return "DIRECT"; } +if (shExpMatch(host, "*.onmicrosoft.com")) { return "DIRECT"; } +if (shExpMatch(host, "partnerservices.getmicrosoftkey.com")) { return "DIRECT"; } +if (shExpMatch(host, "*.passport.net")) { return "DIRECT"; } +if (shExpMatch(host, "*.phonefactor.net")) { return "DIRECT"; } +if (shExpMatch(host, "*.s-microsoft.com")) { return "DIRECT"; } +if (shExpMatch(host, "*.s-msn.com")) { return "DIRECT"; } +if (shExpMatch(host, "*.sharepoint.com")) { return "DIRECT"; } +if (shExpMatch(host, "*.sharepointonline.com")) { return "DIRECT"; } +if (shExpMatch(host, "*.s-msn.com")) { return "DIRECT"; } +if (shExpMatch(host, "*.symcb.com")) { return "DIRECT"; } +if (shExpMatch(host, "*.yammer.com")) { return "DIRECT"; } +if (shExpMatch(host, "*.yammerusercontent.com")) { return "DIRECT"; } +if (shExpMatch(host, "*.verisign.com")) { return "DIRECT"; } +if (shExpMatch(host, "*.windows.com")) { return "DIRECT"; } +if (shExpMatch(host, "*.windows.net")) { return "DIRECT"; } +if (shExpMatch(host, "*.windowsazure.com")) { return "DIRECT"; } +if (shExpMatch(host, "*.windowsupdate.com")) { return "DIRECT"; } + +return "PROXY 127.0.0.2:8080"; +} \ No newline at end of file